News for hackers. Stuff that matters.
Re:Identity Theft, Credit Reports, and You by tptacek on Saturday September 09, 2017 @10:06AM (#15207144)
This was a really excellent post, the best I've seen you write up this material, and among your top 5 posts ever.

Having said that, I'm tentatively going to disagree.

I made a conscious, somewhat coerced choice in my early 20s never to rely on revolving credit. A combination of random course-of-business (of course resolved) delinquencies and no history of revolving credit resulted in my having relatively poor credit. Compounding this, my disinvestment from my own credit score has led to a new dispute resolution strategy for e.g. medical billing mistakes, which is "ignore mistakes and disputes forever" --- you can imagine the resulting impact on my credit score.

The net effect on my life has been minimal.

It was comically difficult for me to obtain an actual bona fide credit card (which I wanted in order to broaden my choice of car rental agencies --- a problem that has become less important over time as more and more rental agencies accept debit cards). A few weeks after I got the first wire transfer from the sale of Matasano, calling Chase with a checking account balance that could fairly be called "moronic", I had to argue for about 30 minutes for them to issue me a credit card with an extremely minimal monthly balance.

That's about the extent of my problems.

Every landlord I've rented from has pulled my credit. My credit has always been bad. But my landlord references were spotless, and that's what landlords seemed to care about.

It's more than likely that if I was in a different career, and particularly if that career was in a lower-paying sector where workers have less leverage, my credit score would be a real concern in finding a job. But in this industry, my general response to being declined for a job as an adverse decision relating to my credit score would be to do to the reputation of the hiring firm on Twitter approximately what the lawyers at the Bank of Bigness believe their regulators will do over an FCRA violation.

I would almost certainly have a hard time getting a loan for a car. But then, see "revolving credit". Don't get a loan for a car. I had one once in my 20s and remember it being a pretty miserable experience. Until very recently, every other car I'd driven since was (a) worse than that car and (b) on balance a more pleasant experience for not coming with a Significant Monthly Bill. Obviously, in this industry, you will eventually reach a point in your career and your personal financial maturity where "obtaining what you believe to be a car commensurate with your status" will stop being an interesting problem.

Which, I think, leaves us with home ownership. I don't have a good answer here. I bought my house in 2005, weeks after starting Matasano, a company which for all the intents and purposes of my mortgage lender did not exist. Suffice it to say I was not able to push that lender around with the contents of my bank account, which were in 2005 also "moronic", but in the other direction. I probably got a worse rate. And it was 2005, so it's possible that my only effective qualification for buying a house was "50.0001% likelihood of currently having a pulse".

My tl;dr here though is, at least in my case: if you don't use credit cards ever, your credit score doesn't much matter, and as it turns out credit cards don't much matter either.

Re:Identity Theft, Credit Reports, and You by sillysaurus3 on Saturday September 09, 2017 @10:39AM (#15207269)
I mean, you're rich. The normal rules don't really apply. Your poor credit sounds like my poor credit, but it has a pretty big impact on my life.

You once mentioned you paid out of pocket to get your family member some kind of medical procedure. I think it was a CT scan? Anyone who can do that isn't really in the same class.

Here's one way it matters: every year, your entire well-being is determined solely by your landlord. You can be an excellent tenant and they'll decide not to renew your lease because reasons. Now you need to move your whole apartment in like three months, which means finding a new place. In some cases this requires a credit check. Not all, but that still limits your options in a tricky situation. Imagine if the place you lived was determined solely by that number you didn't pay attention to.

Want a nice car? Better have cash. Laptop? Cash. $3k to drop on a new laptop isn't feasible for the vast majority of people who aren't affluent.

I know you mean well, and I share your "fuck this broken system" feeling, but it can get you into trouble. Rebellion only works if you have the means.

Here's a concrete question: you need a laptop to do your job. How do you get one without credit? A second hand MacBook still costs >$1k. And yeah, we're talking sums of money that are tiny in comparison to what you're used to. It might be hard to believe that not everybody has $1k laying around. But paying $100/mo is far more pleasant, to say the least.

Here's another anecdote: new apartment in a new city. I was about 21 and had no credit history (bad or otherwise). I'm settling into my new apartment and call around to find out who the ISP is. It's AT&T. Call them up, ask for Internet. "No." "What do you mean 'no?'" "The system says 'unknown risk'. Our policy is to not do business in this situation."

I'm not exaggerating or making it up. There was no alternative, and I was completely screwed. There was no other ISP! We ended up using a family member to establish the account. But most people don't have anybody to fall back on. I don't know if AT&T still has that ridiculous policy, but there are other situations just like that.

Re:Identity Theft, Credit Reports, and You by tptacek on Saturday September 09, 2017 @11:02AM (#15207392)
Let me condense my last post down for you.

1. You're right, in the sense that most people on HN with an established career in technology are, relatively speaking, "rich". That was my point: if you're stably employed in technology, your credit score might matter less than you think it does.

2. You're wrong, in the sense that with the exception of the credit card anecdote, which I related as a way of demonstrating that I had in fact had some interaction with my credit score, all of that post concerned stuff that happened long before we sold Matasano. By the standards of HN in 2017, in the mid-00's, I was most assuredly not rich (the way you mean it; I'm just stipulating your term). I've had terrible credit the whole time.

A big part of my point is that "just use cash" worked out much better for me than attempting to rely on credit. Obviously, if I worked as a retail clerk, that would a very problematic strategy. But I don't. If I had been able to resolve "need a new laptop" with credit instead of cash, I'd have been worse off.

I get that the rules are different for tech workers. Part of the point of saying this is to remind people that the rules may be more different for us than we think, which should have moral implications for us as well.

Re:Identity Theft, Credit Reports, and You by sillysaurus3 on Saturday September 09, 2017 @11:48AM (#15207600)
Well, you mention that you sold Matasano, but that kind of sidesteps that you'd be screwed if it didn't happen. It's not tech workers vs retail clerks so much as financial windfall vs having a regular 9-5.

The credit system just sucks. It's a historical accident. But it's also not really realistic to say "In some cases you can get away with not worrying about your credit score if you're a tech worker."

Re:Identity Theft, Credit Reports, and You by tptacek on Saturday September 09, 2017 @11:54AM (#15207629)
I'm not arguing that the credit system doesn't suck. It sucks so much that I haven't had any meaningful contact with it for 20 years. For most of that time, the overwhelming majority of which I spent financially insecure (and a parent, to boot), my disengagement from credit has ended up feeling like a blessing. I genuinely do not understand why people get credit cards.

As for "windfall vs. 9-5", I spent ~20 years in the latter category, a category which I'm not unlikely to end up in again, and I simply don't agree with you.

Maybe another way to put it is this: for all the problems you've had with personal finances, I assert that acquiring revolving credit is a good solution to none of them.

Finally: since litigating this further is inevitably going to involve getting into pretty squicky financial details and debates over personal financial decision-making, I'm going to stop here. Since I think you'll probably disagree with me, I want to be clear that I expect and will read any rebuttal to this that you write, but I'm not going to continue the debate.

Re:Identity Theft, Credit Reports, and You by sillysaurus3 on Saturday September 09, 2017 @12:09PM (#15207697)
It solves getting your kids through college. That's one of the other pain points. The quality of life difference is massive if you have to work full time and also go to college full time.

It would be delightful to find an answer to some of the problems of bad credit. But it kind of matters.

Re:Identity Theft, Credit Reports, and You by quadrangle on Saturday September 09, 2017 @11:18AM (#15207472)
Although I agree with your point broadly, $3k on a laptop is either a business expense or a luxury. Furthermore, tons of non-rich people who do NOT have money to up and pay for expensive medical costs etc. can readily save up for an affordable laptop (you can get pretty decent second-hand for under $1k actually). People who don't have $800 or $500 lying around might sell some stuff on Craigslist or work a couple odd jobs and save it up.

To be clear: everyone should understand that it's MORE expensive to be poor than to be rich. The key is a BUFFER, just like the buffer loading a streaming video. Someone with a $2k buffer can weather most common issues that come up as long as they can fill the buffer up again each time it gets used. Someone with a $2k buffer is not a truly poor person who is in debt and gets payday loans or worries about whether they will eat, but a buffer like can be had WAY before you can be called "rich" (and some rich folks can be incompetent and not keep a good buffer).

The vast majority of people are in a position where they could keep some buffer if they learn to. The class difference here is whether or not someone gets the financial education to care about keeping a buffer.

But obviously, some items can come up and kill any normal person's modest buffer, and then things get painful. And the rest of your points about how the system works are valid.

Re:Identity Theft, Credit Reports, and You by ams6110 on Saturday September 09, 2017 @11:24AM (#15207506)
> It's AT&T. Call them up, ask for Internet. "No." "What do you mean 'no?'" "The system says 'unknown risk'.

That surprises me. I have relatives who have TERRIBLE credit. Reposessed cars, unemployed, a lifetime of poor financial decisions. They have had no trouble getting utilities or e.g. DirecTV service. They typically have to pay several months in advance as a "deposit" but they are not turned down flat.

Even "unknown risk" would be in the worst case approximately that. Doesn't seem to make sense.

Re:Identity Theft, Credit Reports, and You by tptacek on Saturday September 09, 2017 @11:27AM (#15207523)
I don't know if this is a late 201x thing, but over decades of having piss-poor credit and no funds with which to make advanced payments, I never once had a problem getting phone and Internet service. Renting cars? Yes. Needing to provide some extra documentation for landlords? Yes. Opening new checking accounts? Yes. Getting DSL or cable? Not once.
Re:Identity Theft, Credit Reports, and You by sillysaurus3 on Saturday September 09, 2017 @11:39AM (#15207577)
I was surprised too. It was for having zero credit rather than bad credit. Maybe it was just a corner case I fell into. It was in Petaluma CA in 2010 or so.
Re:Identity Theft, Credit Reports, and You by mjcl on Saturday September 09, 2017 @02:56PM (#15208590)
When I was moving into my first apartment in 2000, one of my planned roommates had the same problem. He had never had any sort of credit/debt account and the landlord wasn't able to actually pull a credit report.
Re:Identity Theft, Credit Reports, and You by redthrow on Saturday September 09, 2017 @03:50PM (#15208865)
It feels like there are many market-based solutions these days even if you had poor credit:

https://www.youtube.com/watch?v=m1AKOVHd3r4

Re:Identity Theft, Credit Reports, and You by cperciva on Saturday September 09, 2017 @01:47PM (#15208184)
Every landlord I've rented from has pulled my credit. My credit has always been bad. But my landlord references were spotless, and that's what landlords seemed to care about.

Were you trying to rent in a tight housing market? In Vancouver, it's common for landlords to (completely illegally) weed out the tenants they don't want -- in particular, single parents, certain ethnic minorities, and people in low-class occupations -- via the excuse of credit scores (even though they accept childfree white professional-class tenants who have those same scores).

I suspect that maintaining a good credit score is far more useful for people who will encounter landlords which are looking for an excuse to reject them.

Re:Identity Theft, Credit Reports, and You by mahyarm on Saturday September 09, 2017 @03:20PM (#15208715)
What happens when you have 10 valid applications as a landlord? Do they even have to tell you the reason why they chose application 3 over all the others? How does that work?
Re:Identity Theft, Credit Reports, and You by tptacek on Saturday September 09, 2017 @01:54PM (#15208232)
Yes: twice in San Francisco during the first bubble, with competing applicants in the room with us, first in SOMA and then in Noe Valley. Also once in Santa Clara during the same time period. (Also 4 times in Chicago, and 2 times in Ann Arbor, but those weren't as challenging.)
Re:Identity Theft, Credit Reports, and You by notlob on Saturday September 09, 2017 @04:24PM (#15209006)
> Every landlord I've rented from has pulled my credit.

There is also a separate tenant screening for real estate that, at least for me, seems to be more reliable as an indicator for trust than the financial credit report. It is possible your landlords are doing the same? Perhaps that’s what you mean by reference checks?

> It's more than likely that if I was in a different career, and particularly if that career was in a lower-paying sector where workers have less leverage, my credit score would be a real concern in finding a job.

I’d point out poor credit is also problematic in high-paying professional fields, e.g. in a sector requiring clearance, or perhaps in a sector requiring licensure. As I understand it even public trust clearance would be problematic with poor credit.

It’s great your strategy has worked out well for you, but it seems a required part of your strategy is to be remarkably lucky.

Re:Identity Theft, Credit Reports, and You by tptacek on Saturday September 09, 2017 @05:55PM (#15209353)
I haven't been government-cleared for anything (as a matter of principle I won't do work for the federal government), but I've been background-checked repeatedly, including by major exchanges, and never once had a problem.

I'd like you tell me more about how you think I've been lucky with respect to my disregard for my credit score. I don't think I have.

Re:Identity Theft, Credit Reports, and You by notlob on Sunday September 10, 2017 @01:02PM (#15213078)
> I haven't been government-cleared for anything (as a matter of principle I won't do work for the federal government), but I've been background-checked repeatedly, including by major exchanges, and never once had a problem.

I don't understand what this contributes. I guess it's great that won't work for the feds but that's hardly a generalizable position. Are you suggesting that passing the background check for a major exchange informs on the outcome of a public trust clearance or a professional license? Criminal background check portion perhaps, but not character and fitness—I would SWAG you'd need to correct your report before you could proceed.

> I'd like you tell me more about how you think I've been lucky with respect to my disregard for my credit score. I don't think I have.

Your tl;dr sums it up, your strategy works for you, but how it at generalizable even for a limited definition for “tech workers”? Partly I think you’re neglecting the advantage in being established in life before the Great Recession, which is part of why I say you are remarkably lucky. Does your strategy work for the younger cohort who would purchase a home post-2008? Does your strategy help for people who experience a significant adverse life event like divorce or a natural disaster?

That part of your "dispute resolution strategy" is to "ignore mistakes and disputes forever" and live unimpeded, when there are so many who could not do the same (myself included, it'd be a career-ender), leaves me slack-jawed with amazement. My congratulations to you, but I hope you see that few can get away with that.

Re:Identity Theft, Credit Reports, and You by creeble on Saturday September 09, 2017 @01:02PM (#15207919)
I would suggest that your disagreement with patio11's post bears no relevance with people who already have credit ratings, have been caught by the Equifax leak, and are at increased risk for identity theft as a result (which, I think, are those the post addresses).

It seems to me you are simply gloating in your ability to avoid credit. Those who are able to avoid credit have little interesting to add to the conversation about credit reporting agencies.

Re:Identity Theft, Credit Reports, and You by tptacek on Saturday September 09, 2017 @01:15PM (#15207987)
This comment doesn't make any argument that wasn't addressed directly in the comments preceding it.
Re:Identity Theft, Credit Reports, and You by creeble on Saturday September 09, 2017 @05:05PM (#15209151)
Okay, sorry, perhaps my point is different.

It is irrelevant whether you have any credit cards, or whether you have a bad credit rating, or whether you care. If you have a mortgage in the US, then Equifax, Experian, and TransUnion have your number. They have your number, they have mine, and they have brownbat's.

Now, other people have my number. And the only way I could have avoided that was to have paid cash for my house and/or had a fairly limited set of landlords forever. So the OP's point still stands, but I strongly agree with patio11's comment that my credit rating cares about me irrespective of how I care about it.

EDIT: sp

Re:Identity Theft, Credit Reports, and You by tptacek on Saturday September 09, 2017 @05:56PM (#15209359)
I think you've missed the point of this subthread, which is admittedly a tangent. I'm not suggesting that I'm less impacted by the Equifax breach.