News for hackers. Stuff that matters.

A comment on Three Years in Identity Theft Hell. Parent comment

Re:Three Years in Identity Theft Hell by alkonaut on Sunday September 17, 2017 @02:18AM (#15268455)
More importantly, we can 2FA from my id number to my address because there is a db mapping from id to post address.

With a locked mailbox (which is the default) it becomes a hassle to steal an identity.

If I get a new credit card it's sent to the address I id'd for.

[ Parent | on HN ]
Re:Three Years in Identity Theft Hell by mseebach on Sunday September 17, 2017 @06:25AM (#15269015)
It's better than just trusting the SSN, but I'd still prefer a system that can't be beat with a stick and some chewing gum.

(Yes, I had an ID theft near-miss that involved a locked mail box in a locked stairwell. To me, the more obvious perpetrator seemed to be someone with access to the mail delivery pipeline, but the investigator I spoke certainly did not think terribly highly of the security of a locked mailbox)

[ Parent | on HN ]