> you now need the new ssn/name combo authenticate The point is that an SSN/name pair is not a mechanism of authentication. Many companies are negligently usin

> you now need the new ssn/name combo authenticate The point is that an SSN/name pair is not a mechanism of authentication. Many companies are negligently using it in place of one because they don't actually care about fraud, having pushed most of the damage onto the public. Then they invented the nonsensical concept of "identity theft" to enshrine how they wish things worked, as a further fuck you to the public. So no, further entrenching anything about that broken approach is a horrible idea. Revoking a social security number makes as much sense as revoking someone's natural name.