4 ms·

It's worth remembering that the main reason this kind of data breach is a real problem is mostly due to the incompetence of the IRS. For any serious financial o

It's worth remembering that the main reason this kind of data breach is a real problem is mostly due to the incompetence of the IRS. For any serious financial organization, knowing a person's SSN, name, address, etc doesn't allow you to access or withdraw that person's finances. But the stupidity of the IRS means that people are easily targeted by false tax return attacks. File a fake tax return for someone, using their SSN/name/address, but tell the IRS you changed address. Then the IRS sends your tax refund to the new address, and boom, you just collected some poor sod's refund. To add insult to injury, the IRS is probably going to audit the person whose refund you stole.

daveguy 2y ago
I agree. The IRS should be better funded so they can afford to update their systems and hire more tech experts.
- grepexdev 2y ago
  I hope this is meant to be satirical. The IRS has a massive budget. Maybe just reallocate their current funds instead of giving them more is a better idea.
  - boston_clone 2y ago
    I don’t think the parent is satirical at all; as an enumerated power, the IRS needs modernization and better funding. Recent hiring expansions have increased audits for high earners and generated additional revenue. Turbotax’s lobbyists are losing influence and we’re enjoying free filing options for individuals in some states. It’s also reasonable to say that a revenue service is not responsible for defining authentication security standards. Why do you think reallocating funds is worth it as a response to this issue? Where would those funds go?
    - sporkland 2y ago
      I'm sure you've seen teams that have bad leadership / a culture of dysfunction. They're always asking for more headcount and no much how much you add they don't get any better. I assume parent was pointing out that no matter how many resources you give to the IRS they won't get functionally better. You need to change the leadership/incentives/culture, which is hard with govt agencies but resources also won't make the problem go away.
      - boston_clone 2y ago
        I simply don't agree that the issues faced are the same; published reports detail how the complexities inherent to high-income non-filers and filers alike leave plenty of room for more accurate assessments. [0][1] 0. https://www.gao.gov/products/gao-24-106112 https://www.gao.gov/products/gao-24-106112 1. https://www.irs.gov/newsroom/irs-launches-new-effort-aimed-at-high-income-non-filers-125000-cases-focused-on-high-earners-including-millionaires-who-failed-to-file-tax-returns-with-financial-activity-topping-100-billion https://www.irs.gov/newsroom/irs-launches-new-effort-aimed-a...
smileysteve 2y ago
But not just the IRS; the banking system, most healthcare providers, states for most of a century, and the credit bureaus for REusing SSN as unique identifier "passwords".
_uhtu 2y ago
This comment is shockingly misguided. The IRS doesn't have the authority to mandate the creation of a secure national ID system and enforce it's use by the financial system. Only congress has the ability to really do that. The IRS collects revenue. Even if it did have that authority, it doesn't have the budget to accomplish that goal.
- dingnuts 2y ago
  isn't it funny how no government service is ever at fault, it's always just a problem of funding? The IRS is good, just under funded. Public schools are good, just under funded. The NHS is good, just under funded. The roads are good, just under funded except then funding is raised, and it's still a problem of funding. and inevitably, it's the evil side of the government (you know the one) that is to blame, even if there is no money to spend. how does a public service determine when they have enough funding?
  - slg 2y ago
    This is neither a problem of funding or any government service being at fault. This is the fault of American culture. A national ID system sounds too scary to too many Americans. Politicians aren't going to waste their political capital on pushing through something so unpopular. It really isn't any more complicated than that. There is a huge desire for some sort of national ID system and SSNs are the closest we got so they filled the vacuum. It is silly to blame that on the IRS. It is a societal failure.
    - wilkystyle 2y ago
      I'm not trying to be combative, but this sentiment just doesn't pass the smell test to me. Yes, I agree that there is a cultural undercurrent of fear around a national ID system, and I also agree that politicians are likely to game their political capital for the greatest return in their career. What I do NOT believe is that the Social Security number just sort of came about and started being used by government services such as the IRS without anyone being responsible for that huge organizational decision or the initial (current?) lack of security controls around its implementation. To me, it seems to be an almost certainty that it is both an organizational problem at the government service level AND (as a result) a funding problem.
blackguardx 2y ago
What you describe might be out of date. Someone tried to use my identity to file a fake tax return. The IRS caught it and now I get issued a PIN every tax season for kinda-sorta two factor auth.

daveguy 2y ago

I agree. The IRS should be better funded so they can afford to update their systems and hire more tech experts.

grepexdev 2y ago
I hope this is meant to be satirical. The IRS has a massive budget. Maybe just reallocate their current funds instead of giving them more is a better idea.
- boston_clone 2y ago
  I don’t think the parent is satirical at all; as an enumerated power, the IRS needs modernization and better funding. Recent hiring expansions have increased audits for high earners and generated additional revenue. Turbotax’s lobbyists are losing influence and we’re enjoying free filing options for individuals in some states. It’s also reasonable to say that a revenue service is not responsible for defining authentication security standards. Why do you think reallocating funds is worth it as a response to this issue? Where would those funds go?
  - sporkland 2y ago
    I'm sure you've seen teams that have bad leadership / a culture of dysfunction. They're always asking for more headcount and no much how much you add they don't get any better. I assume parent was pointing out that no matter how many resources you give to the IRS they won't get functionally better. You need to change the leadership/incentives/culture, which is hard with govt agencies but resources also won't make the problem go away.
    - boston_clone 2y ago
      I simply don't agree that the issues faced are the same; published reports detail how the complexities inherent to high-income non-filers and filers alike leave plenty of room for more accurate assessments. [0][1] 0. https://www.gao.gov/products/gao-24-106112 https://www.gao.gov/products/gao-24-106112 1. https://www.irs.gov/newsroom/irs-launches-new-effort-aimed-at-high-income-non-filers-125000-cases-focused-on-high-earners-including-millionaires-who-failed-to-file-tax-returns-with-financial-activity-topping-100-billion https://www.irs.gov/newsroom/irs-launches-new-effort-aimed-a...

smileysteve 2y ago

But not just the IRS; the banking system, most healthcare providers, states for most of a century, and the credit bureaus for REusing SSN as unique identifier "passwords".

_uhtu 2y ago

This comment is shockingly misguided. The IRS doesn't have the authority to mandate the creation of a secure national ID system and enforce it's use by the financial system. Only congress has the ability to really do that. The IRS collects revenue. Even if it did have that authority, it doesn't have the budget to accomplish that goal.

dingnuts 2y ago
isn't it funny how no government service is ever at fault, it's always just a problem of funding? The IRS is good, just under funded. Public schools are good, just under funded. The NHS is good, just under funded. The roads are good, just under funded except then funding is raised, and it's still a problem of funding. and inevitably, it's the evil side of the government (you know the one) that is to blame, even if there is no money to spend. how does a public service determine when they have enough funding?
- slg 2y ago
  This is neither a problem of funding or any government service being at fault. This is the fault of American culture. A national ID system sounds too scary to too many Americans. Politicians aren't going to waste their political capital on pushing through something so unpopular. It really isn't any more complicated than that. There is a huge desire for some sort of national ID system and SSNs are the closest we got so they filled the vacuum. It is silly to blame that on the IRS. It is a societal failure.
  - wilkystyle 2y ago
    I'm not trying to be combative, but this sentiment just doesn't pass the smell test to me. Yes, I agree that there is a cultural undercurrent of fear around a national ID system, and I also agree that politicians are likely to game their political capital for the greatest return in their career. What I do NOT believe is that the Social Security number just sort of came about and started being used by government services such as the IRS without anyone being responsible for that huge organizational decision or the initial (current?) lack of security controls around its implementation. To me, it seems to be an almost certainty that it is both an organizational problem at the government service level AND (as a result) a funding problem.

blackguardx 2y ago

What you describe might be out of date. Someone tried to use my identity to file a fake tax return. The IRS caught it and now I get issued a PIN every tax season for kinda-sorta two factor auth.