4 ms·
> We can replace the role that the SSN plays (authentication) with modern techniques like public-key cryptography. Would that we could (I mean political will,
by MarkMarine 2y ago
> We can replace the role that the SSN plays (authentication) with modern techniques like public-key cryptography.
Would that we could (I mean political will, not technical capability) but let me tell you what is actually happening. We're replacing the identity provided by a secret number (SSN) with your phone number, and therefore your whole credit profile, your SSN, every address you've ever had, where you are standing right now, if you're in your home range (tower/wifi) and if you're actually clicking the approve this link from a device that they know. No one asked us, but we're ceding our privacy to push back against this threat.
- vasco 2y agoYou can change phone numbers hundreds of times per hour but SSN is for life.
- MarkMarine 2y agoAh, someone who doesn’t understand modern identity. Read the docs about the breach above, everyone’s SSN is out there. It’s as secure as your birthday or your dad’s middle name.
- deleted 2y ago[deleted]
- vasco 2y agoExactly why phone numbers are better than SSNs, did you just misread what I wrote?
- MarkMarine 2y agoNo, I didn’t misread it, you can’t use a phone number you can switch around every few minutes as identity for finance. It’s not trusted, it’s easy to see it’s VOIP. You’ll always get sent to IDV or other subsequent verification, but if you have a mobile phone with a reputable cell provider, the provider can verify who you are and if you’re holding the phone applying, if you're in your normal area, if your location history up to that point makes sense, if you just went through a SIM switch etc. this can be your trusted identity. Or, it is your trusted identity, as long as you clicked the yes button