News for hackers. Stuff that matters.
Re:Amazon's customer service backdoor by lucaspiller on Monday January 25, 2016 @03:19AM (#10966152)
In the UK this and a lot more is public information. As an example of what is available about me online (without paying a penny) just by searching for my name:

- The year I was born

- The district I was born (not the exact town, although that wouldn't be hard to guess)

- My mother's maiden name (which is what most banks et al ask as a security question...)

- The areas I've lived (based upon the electoral register, which you can opt out of but supposedly this impacts your credit rating)

- That I am a director of a company

This is just what is available for free - you can get the full records this is extracted from by paying a small fee.

If you know the name of my company (which isn't hard to find out), you can also find for free:

- My full name

- My address

- My date of birth

- Roughly how much I make a year

TL;DR; If you rely on this to 'identify' someone, you are doing it wrong.

Re:Amazon's customer service backdoor by Lawtonfogle on Monday January 25, 2016 @09:27AM (#10967297)
>TL;DR; If you rely on this to 'identify' someone, you are doing it wrong.

Which is why the system is set up so that if I go to the bank with this information and take money as you, I have stolen your identity and thus you are the victim and are responsible for the losses unless you fight back. Identity theft was created so financial institutions could be lax with their verification process thanks to the blame being shifted.

In reality, identify theft doesn't exist. In my example I stole from the bank, no you, and you shouldn't at all be involved in the process.

Re:Amazon's customer service backdoor by manigandham on Monday January 25, 2016 @11:20AM (#10967998)
...that's not what identify theft is. It doesn't have to involve stealing from banks, it just happens to be a popular use of it.

It definitely wasn't just "created" either. Pretending to be someone else to gain the benefits of their identity/reputation/privilege has always been around.

Re:Amazon's customer service backdoor by rasz_pl on Monday January 25, 2016 @08:00PM (#10971240)
>In reality, identify theft doesn't exist. In my example I stole from the bank

you wish https://www.youtube.com/watch?v=CS9ptA3Ya9E

Re:Amazon's customer service backdoor by wrboyce on Monday January 25, 2016 @07:36AM (#10966815)
Your remark about opting out of the electoral register is not quite correct.

It is a requirement to register if requested, the fine for failing to do so is £80. However, it is always an option to not appear on the open register. The open register is publicly accessible, and being absent from it will not be detrimental to your credit rating.

Re:Amazon's customer service backdoor by garblegarble on Monday January 25, 2016 @08:29AM (#10967031)
>being absent from it will not be detrimental to your credit rating.

But it will make identity checks with banks a little more complicated, normally they use the electoral register to confirm your address

Re:Amazon's customer service backdoor by gmac on Monday January 25, 2016 @09:07AM (#10967203)
I have always opted out of the open or edited register, and have never had a problem with this.

Seems like your details can still be used for credit checks and fraud prevention (which I imagine covers confirming identities and addresses) even when you opt out[1].

[1] http://www.electoralcommission.org.uk/faq/voting-and-registr...

Re:Amazon's customer service backdoor by hackerboos on Monday January 25, 2016 @08:42AM (#10967079)
At least Nominet allows you to opt out of public WHOIS information.

Although they planned to change this if you ran ads on your site:

http://www.theguardian.com/technology/2014/jun/11/nominet-ne...