News for hackers. Stuff that matters.
Re:Senators push to ditch social security numbers in light o... by harryh on Wednesday November 08, 2017 @09:14PM (#15659214)
When you go to open a credit card in Europe how do you prove that you are you? What prevents me from pretending to be you?
Re:Senators push to ditch social security numbers in light o... by PeterisP on Thursday November 09, 2017 @02:41AM (#15660600)
The key limitation is that you'd have to have proper ID.

Forging or getting a fake ID is harder than counterfeiting money (maybe accessible to organized crime, but certainly not worth the cost/effort/risk just to steal a few thousand dollars); lost/stolen IDs have a registry that all the banks check; and you have to show up in person so if detected you don't get a second chance, you're leaving the building in handcuffs.

Seriously, the only problem with IDs I recall from banking was the use of IDs bought off of homeless people to register shell companies for money laundering, but those were real IDs and usually with the real owner "hired" for the initial account opening.

Re:Senators push to ditch social security numbers in light o... by StavrosK on Wednesday November 08, 2017 @09:20PM (#15659244)
You have to show national ID, a proof of residence and have your tax number ready.
Re:Senators push to ditch social security numbers in light o... by harryh on Wednesday November 08, 2017 @09:23PM (#15659260)
But the tax number isn't secret right? So that doesn't do much?

What is proof of residence? A copy of your apartment lease or something like that?

Re:Senators push to ditch social security numbers in light o... by StavrosK on Wednesday November 08, 2017 @09:34PM (#15659319)
Yes, the tax number isn't secret, it's just to prove that you know it and so they can correlate your tax situation, I think. The biggest proof is the identity document, which is not trivial to forge.

Proof of residence is a copy of your lease, or a bill by a power or phone company, basically a piece of formal correspondence with your address on it, so you can sort of prove you live where you say.

The bank photocopies all this, so if you forge an ID card to include your photo, they store the photo too, and if you get caught you're in deep trouble, as forgery is a serious crime. I think that's actually what prevents most identity theft here.

Re:Senators push to ditch social security numbers in light o... by espadrine on Thursday November 09, 2017 @12:55AM (#15660209)
In France, the institutions emitting the proofs of residence add a 2D-Doc, a flashcode printed on the document that includes the key information, signed with the institution's private key.

https://ants.gouv.fr/Les-solutions/2D-Doc

Translated: https://translate.google.com/translate?sl=auto&tl=en&js=y&pr...

Re:Senators push to ditch social security numbers in light o... by harryh on Wednesday November 08, 2017 @09:46PM (#15659397)
Ya, so I think the big difference between Europe and the US is that you can open a lot of accounts online in the US so there is no opportunity to examine and copy a physical ID card. I can definitely see how that would raise the difficult of pretending to be someone else.
Re:Senators push to ditch social security numbers in light o... by kuschku on Thursday November 09, 2017 @12:42AM (#15660157)
I just opened a bank account in Germany via an app.

I had a choice between either using my eID for verification, or doing a video call and showing the ID into the camera (in a way that their systems can automatically verify the security measures).

It took 20 minutes to go from nothing to having an account, and being able to move money to ans from it.

Re:Senators push to ditch social security numbers in light o... by kaybe on Thursday November 09, 2017 @10:53AM (#15663388)
Plus there is an option where you either go to the local post office or the postman comes and verifies your ID.
Re:Senators push to ditch social security numbers in light o... by EADGBE on Thursday November 09, 2017 @10:01AM (#15662913)
Proof of residence makes it seem like it's not automated. Is the credit card approval process not automated there?
Re:Senators push to ditch social security numbers in light o... by StavrosK on Thursday November 09, 2017 @10:08AM (#15662986)
I'm not sure, I've never wanted a credit card. Why would you want automated credit card issuance?
Re:Senators push to ditch social security numbers in light o... by EADGBE on Monday November 13, 2017 @09:27AM (#15686705)
Well, you've never wanted a credit card.
Re:Senators push to ditch social security numbers in light o... by ryanlol on Wednesday November 08, 2017 @09:51PM (#15659424)
>The biggest proof is the identity document, which is not trivial to forge.

But it's usually trivial to purchase a forgery.

Re:Senators push to ditch social security numbers in light o... by PeterisP on Thursday November 09, 2017 @02:52AM (#15660657)
No, not really. I've read that in USA it's somewhat common for people to possess fake IDs e.g. for students for age-verification purposes; but in EU forged IDs are serious business - it's really hard to make a somewhat passable forgery, it's harder than counterfeiting currency, so unless you've got contacts with organized crime (e.g. your local drug dealer doesn't have such access) you're not going to find anyone willing to make you such an ID, and if you do, it's likely a police sting operation. Getting a fake ID gives limited benefits and means jailtime even if you don't attempt to use it (fraud charges would be extra), there's not much demand among "normal people" for it (unlike e.g. drugs), so there's not a flowing market that would make such a purchase trivial.

Also, even if you could get one, it's going to cost thousands, so it's not worth it for mass scamming. Also, you'd have to show up in person and risk immediate arrest if the forgery gets detected.

Re:Senators push to ditch social security numbers in light o... by krinchan on Thursday November 09, 2017 @11:32AM (#15663732)
> e.g. for students for age-verification purposes

What I'm hearing is our idiotic age limit on drinking makes ID forgery lucrative enough to outweigh the risks. Therefore: The drinking age in the USA is largely responsible for making identity theft easier.

I'm kidding, another major hole in this is a unique nexus of states having different ID/Driving License implementations and the fact that a vast portion of our citizens lack a passport.

Also, I'm not sure where the money is in the current system, but every time the USA tries to create a national ID all sorts of astroturfed nonsense comes out about Big Brother and COMMNUNISM!!

Re:Senators push to ditch social security numbers in light o... by ryanlol on Thursday November 09, 2017 @04:25AM (#15661013)
> it's really hard to make a somewhat passable forgery

It's not, I've held several. For EU countries.

>unless you've got contacts with organized crime

Or an internet connection!

>Getting a fake ID gives limited benefits and means jailtime even if you don't attempt to use it

My personal experience has been very different. But I guess this'll vary from country to country.

>there's not much demand among "normal people" for it

How many undocumented migrants are there in Europe again? Are those people not "normal"?

>Also, even if you could get one, it's going to cost thousands

Nonsense, hundreds.

Re:Senators push to ditch social security numbers in light o... by dagw on Thursday November 09, 2017 @06:52AM (#15661638)
It's not, I've held several. For EU countries.

As in an actual national ID that can be used to open bank accounts and cross borders, or some other sort of non-official ID that might be good enough to get you into bars?

Re:Senators push to ditch social security numbers in light o... by ryanlol on Thursday November 09, 2017 @07:54AM (#15661947)
Open bank accounts and cross borders kind.
Re:Senators push to ditch social security numbers in light o... by dfox on Thursday November 09, 2017 @03:11PM (#15665479)
I suspect that what you have seen were all forgeries of temporary non-machine-readable IDs, ie. ID-2 format laminated cardstock, instead of ID-1 (credit card size) plastic (smart) card, which are good enough to cross land borders, for getting beer at bar or for cursory inspection by police, Such IDs are usually insufficient to open bank account (and generally rejected by anyone who cares, including many parts of government) or air travel.

Edit: or given the thread context you mean forgeries of the same level as US driver licenses for under age drinking, which is quite possible, but such forgery is readily distinguishable by anyone who has actually seen real EU ID card.

Re:Senators push to ditch social security numbers in light o... by ryanlol on Thursday November 09, 2017 @03:29PM (#15665623)
>ID-1 (credit card size) plastic (smart) card

These.

>ID-2 format laminated cardstock

Not these, I've seen a plenty of US ones like this.

I am talking about forgeries specifically sold for the purpose of opening bank accounts.

Re:Senators push to ditch social security numbers in light o... by chki on Thursday November 09, 2017 @06:48AM (#15661621)
You're seriously admitting to holding various forged ID cards in several EU countries? To me that is similar to someone just casually noticing that they have made counterfeit money or stolen a wallet – seriously criminal.

And I'm also heavily doubting that an internet connection is enough to get a forged ID card. It does elude me how one would do that without some sort of special machines.

Re:Senators push to ditch social security numbers in light o... by ryanlol on Thursday November 09, 2017 @07:55AM (#15661952)
There are tons of online sellers... ID cards and passports are far easier to ship than drugs.

Even the reddit fakeid community seems to have some pretty good EU ids.

Re:Senators push to ditch social security numbers in light o... by throwanem on Thursday November 09, 2017 @07:56AM (#15661962)
You use the Internet connection to find and do business with people who have the special machines, would be my guess.
Re:Senators push to ditch social security numbers in light o... by silversmith on Thursday November 09, 2017 @12:37AM (#15660137)
If someone is targeting you and especially you, I assume it wouldn't be super complicated.

However, purchasing a thousand SSNs and automating signups sounds hell of a lot easier than purchasing a thousand passports and physically visiting the bank offices.

Re:Senators push to ditch social security numbers in light o... by wmf on Thursday November 09, 2017 @12:21AM (#15660080)
Still, requiring criminals to buy forged IDs is much more friction than not even asking for ID, as happens in the US.
Re:Senators push to ditch social security numbers in light o... by kuschku on Thursday November 09, 2017 @12:43AM (#15660162)
If you have a way to circumvent the electronic signing solution used by most European eIDs, then nothing stops you anyway.
Re:Senators push to ditch social security numbers in light o... by ryanlol on Thursday November 09, 2017 @04:26AM (#15661019)
Nobody would ever question a broken chip. I don't think they even read them in most places, perhaps Estonia? (before the Infineon thing anyway)
Re:Senators push to ditch social security numbers in light o... by Luc on Thursday November 09, 2017 @04:55AM (#15661149)
Banks, police, city administration, doctors, pharmacies, insurance - those are the reasons I've pulled out my ID card in the past 10 years, and every single time it was to read the chip, with barely a passing glance given to the card itself.
Re:Senators push to ditch social security numbers in light o... by ryanlol on Thursday November 09, 2017 @04:57AM (#15661160)
I suppose you'd just use a passport instead then? Or do they actually verify those too?
Re:Senators push to ditch social security numbers in light o... by kuschku on Thursday November 09, 2017 @07:27AM (#15661815)
If you use a passport, it'll take a lot longer to verify.

For example, banks will photocopy your passport and verify the signature on it to ensure that it's correct.

(Basically, there's an algorithm used to compute a 30 digit hash on the ID or passport, which is computed from the IDs content and a secret seed. Anyone can verify this hash easily with open algorithms and tools, but only the government can create them).

Re:Senators push to ditch social security numbers in light o... by cr1895 on Thursday November 09, 2017 @06:18AM (#15661496)
>What is proof of residence?

At least within the Netherlands, your residence is officially registered with the municipality. This is tied in with your Citizen Service Number (BSN). Without this, you cannot open a bank account.

Re:Senators push to ditch social security numbers in light o... by vorotato on Thursday November 09, 2017 @02:14PM (#15665013)
and I bet you can't get a residence without a bank account huh.
Re:Senators push to ditch social security numbers in light o... by godzilla82 on Thursday November 09, 2017 @03:09AM (#15660713)
Don't the credit card companies do a credit check or is your tax information sufficient to know your credit worthiness? If a credit check is done, do you know which identifier the credit rating agencies use?
Re:Senators push to ditch social security numbers in light o... by Joeri on Thursday November 09, 2017 @04:01AM (#15660901)
Every country is different, but here’s the belgian system:

There is a national ID number, equivalent to SSN, which is printed on the ID, and to which the credit history is linked. It is used for distinguishing identity, but not for authentication. For authentication you need the physical ID and sometimes the pin code. The ID card carries a digital certificate which makes them hard to forge (I’ve never heard of outright forgery), and allows for online identity (like filing taxes or opening a bank account online). Obtaining a new ID requires either presenting the old one, or visiting the police to have your identity verified in other ways.

Re:Senators push to ditch social security numbers in light o... by petre on Wednesday November 08, 2017 @11:24PM (#15659840)
You have an ID card with a photo on it. They're normally renewed every 10 years. For credit cards you must also show income data.
Re:Senators push to ditch social security numbers in light o... by peoplewindow on Wednesday November 08, 2017 @09:25PM (#15659275)
Credit cards are harder to obtain. This is not clearly a bad thing.
Re:Senators push to ditch social security numbers in light o... by harryh on Wednesday November 08, 2017 @09:29PM (#15659290)
It sounds like it's mainly that you have to sign up for one on person? And you can't really do it online? Is that most of it?
Re:Senators push to ditch social security numbers in light o... by hocuspocus on Thursday November 09, 2017 @02:06AM (#15660464)
I signed up for all my bank accounts and credit cards online. But they have to check your ID, more and more through videochat nowadays, before that you'd either need to mail documents or go to a post office where the staff is able to stamp a form that says they've checked your ID.

Also in most European countries the administration knows your official address and companies can check that you live where you pretend to.

Re:Senators push to ditch social security numbers in light o... by andrewshadura on Thursday November 09, 2017 @09:23AM (#15662575)
The bank may refuse to issue one if they don't like you, and they often do so. For example, if you're not a citizen of the country. Or don't have permanent residence yet. Or they don't like your accent. Or…

My first credit card application was rejected with no explanations.

Re:Senators push to ditch social security numbers in light o... by dagw on Thursday November 09, 2017 @04:35AM (#15661065)
Sure you can sign up for one online. But at least in Sweden you generally have to identify yourself with a cryptographic token issued by your bank.
Re:Senators push to ditch social security numbers in light o... by ryanlol on Wednesday November 08, 2017 @09:49PM (#15659411)
In Europe credit cards are very rare so bank accounts are usually the target instead. In Europe it's also practical to send wire transfers online without going to a branch, unlike the US.

Getting your bank accounts emptied sucks much more than having someone open a credit card in your name.

Re:Senators push to ditch social security numbers in light o... by rypskar on Thursday November 09, 2017 @04:01AM (#15660896)
>>In Europe credit cards are very rare

I think we most be from different parts of Europe. Where I live it is hard to avoid getting one or more credit cards

Re:Senators push to ditch social security numbers in light o... by Swizec on Thursday November 09, 2017 @04:15AM (#15660971)
In my experience of living on both continents: European credit cards are much more like debit cards in the US and US-style credit cards are super rare.

Everyone I know in Europe with a “real”credit card just has an Amex.

Re:Senators push to ditch social security numbers in light o... by corin_ on Thursday November 09, 2017 @04:42AM (#15661100)
Don't try to generalise banking/credit cultures across Europe, some countries may be the same as each other but there's a wide variety.

According to https://merchantmachine.co.uk/visa-mastercard-amex/ there are very few places in Europe where AmEx is #1 for credit cards (and, being from the UK, I'm actually surprised to see UK as one of those countries... I would have bet money on Visa/Mastercard having higher market share than AmEx here, even for credit cards alone).

From personal experience: what kind of cards (both debit vs credit, and what network they're on) varies massively in different EU countries.

Re:Senators push to ditch social security numbers in light o... by Swizec on Thursday November 09, 2017 @05:01AM (#15661175)
I had a European Visa. It was very different than my US Visa.

In the US it collects points and cashback and you can magically go above the limit if you have money on your checking account. You have to do really really crazy stuff to get a transaction rejected. It gives you insurance for car rentals and concierge services for things I never considered.

In Europe I had a Visa and a MasterCard. No points, no cash back. Couldn’t go over the limit, forced to pay everything off every month. If you don’t, card is blocked.

In the US you can (often?) pay off as little as $25 on a massive CC debt and there’s a lot of interest on what you don’t pay off. I didn’t have any interest in Europe, it just stopped working if I didn’t pay it off next month.

From what I can tell, most Americans wouldn’t recognize my European Visa or MasterCard as a credit card. It behaves like a half step between debit and credit.

Are other cards in Europe closer to the American version?

Re:Senators push to ditch social security numbers in light o... by dagw on Thursday November 09, 2017 @05:09AM (#15661215)
Both MasterCard and Visa offer both types of cards. I've got two different Mastercards from my bank. One that is a debit card, draws money directly from my account and stops working if there is no money in the account. The other is a credit card with a line of credit, a bill at the end of each month and an option to only pay off a small part of what I owe.

That being said the debit card version is the one you get by default, and the credit card version is something you have to ask for separately.

Re:Senators push to ditch social security numbers in light o... by corin_ on Thursday November 09, 2017 @05:58AM (#15661429)
It varies by country, and by what companies offer to different consumers. I'm not an expert in this area, but a few examples I know of:

- In the UK, Visa/Mastercard are the most common networks used for bank debit cards, using them pulls money from your bank account directly. Most banks give most adults (citation needed, but I think) a debit card by default with an account.

- In the UK, you can apply for credit cards from a number of companies, including banks (but it's a seperate to any bank account you might have with them), and credit card only companies. Different providers offer different types of cards, and the kind of deal you can get will depend on your credit history, salary, etc. They will (nearly always) have a credit limit, which could be a few hundred or could be very large. They will have a specific rule about minimum payments - some might want your balance paid in full each month, others will ask for a minimum payment (which could be a tiny percent of the amount owed) each month. If you pay in full, you don't get charged interest. If you take longer to pay, but within the agreed terms, you'll pay some sort of interest, which could be reasonable or extremely expensive depending on the card you have. Some cards offer benefits (points or cashback, maybe other perks like special deals, concierge services, etc.) while some are purely lines of credit with no other benefits.

- In France, I was given a Visa debit card when opening a standard bank account. No experience with French credit cards.

- In Belgium, if you want a card on the Visa/Mastercard networks, you need to get a credit card - most people use debit cards which use different networks (I think they use Maestro and another one..)

Re:Senators push to ditch social security numbers in light o... by palunon on Thursday November 09, 2017 @06:23AM (#15661514)
> No experience with French credit cards.

They basically don't exist here.

Re:Senators push to ditch social security numbers in light o... by Neracked on Thursday November 09, 2017 @08:49AM (#15662299)
I am in France and it seems Visa Premier and Mastercard Gold with payments deferred to the end of month - with zero interest - are now considered "credit cards" (because they can be regarded as a limited form of credit, I suppose).

I have a small "CREDIT" label next to the chip of my new card and airlines (EasyJet, Ryanair...) now reject my card if I select the cheaper "Debit card" payment option.

Re:Senators push to ditch social security numbers in light o... by rypskar on Thursday November 09, 2017 @05:32AM (#15661324)
I have bonus points on some cards and cash back on other. All include stuff like travel insurance if I pay > 50% of the trip with the card. I can not go over the limit based on how much money I have in the bank since the cards are not connected to my bank account. But my limit is not a problem since some increase it without me asking and the only time I have needed to increase it on a card I could do that online in two minutes. I select how much of the balance I want to pay back each month, if I pay all there is no interest if I pay parts the interest is high and the CC company makes money
Re:Senators push to ditch social security numbers in light o... by foldr on Thursday November 09, 2017 @06:19AM (#15661499)
You probably ended up with some kind of crappy "starter" not-really-a-credit card due to a lack of credit history in the relevant country. Those exist in the US too. It's odd that you call it a "European visa". Different European countries have different banking systems. In the UK at least, credit cards work the same as in the US.
Re:Senators push to ditch social security numbers in light o... by lmm on Thursday November 09, 2017 @07:44AM (#15661903)
You're overgeneralising. As a European I have four Visa cards in my wallet, two of which behave like your "US Visa" and two of which behave like your "European Visa".
Re:Senators push to ditch social security numbers in light o... by tialaramex on Thursday November 09, 2017 @04:56AM (#15661158)
The UK has credit cards that are used by ordinary people much the same as in the US. Cards are very common there, most people have at least one.

But it has different laws so that they're not as exploitative. The card companies accepted these laws in order to get a chance at the relatively wealthy British customer base. In particular:

* Issuers have to tell you each month how much it's going to cost in total to pay off your debt gradually, which is usually a scarily enormous figure. * Issuers own the risk of buying most things with the card. If you pay £200 for a hat from an online merchant with the card, and then the merchant goes out of business without delivering, the law says the Issuer bought that hat, you owe nothing. * Issuers own the risk of card fraud. Unfortunately juries and judges both tend to believe the smartly dressed bank official in a trial, but in law all the responsibility for fraud lies with the Issuer unless they can prove it's your fault.

A lot of people like me have a credit card, and then have the issuing bank also automatically pay off the balance every month from their current account. So the effect is that their credit card is a rolling 30 day interest free loan.

Re:Senators push to ditch social security numbers in light o... by vel0city on Thursday November 09, 2017 @01:47PM (#15664780)
All of those rules sound like the experiences I've had with US credit cards, at least recently. Statements have an area showing "If you only pay the minimum balance, it will take X years and end up totaling $Y." Almost all cards I have used have fraud protections built in, with many even having additional warranties for products purchased.
Re:Senators push to ditch social security numbers in light o... by rypskar on Thursday November 09, 2017 @05:28AM (#15661307)
I have several Visa and Mastercard credit cards. Amex tries go get into the market here, but have higher interest rates and a yearly fee, while most Visa and Mastercards are without any yearly fee, so Amex is rare here. The credit cards I have are not connected to my account and if I pay all the next month there is no interest, but if I only pay parts there are lots of interest. I do get points/credits on some of the cards, so that are the cards I do use.

So I am not sure what is the difference between these cards and "US-style" cards. Maybe that we only need to get an automated credit check based on past years tax reports to get them, instead of having to work hard to get a good credit score?

The differences between different parts of Europe can be larger than the difference between some parts of Europe and USA

Re:Senators push to ditch social security numbers in light o... by dagw on Thursday November 09, 2017 @05:06AM (#15661200)
Everyone I know in Europe with a “real”credit card just has an Amex.

Lived in Sweden for the past 12 years, and never seen anybody us an Amex card (seen lots of ads for Amex though). Mastercard seems to own basically the entire credit card market here.

Re:Senators push to ditch social security numbers in light o... by r3bl on Thursday November 09, 2017 @10:53AM (#15663391)
Does it really matter if it's MasterCard or Visa?

In my country (Bosnia), there's pretty much no difference between them. Maybe half a euro more per month for one or the other. All the banks I know of let you pick between them. Citizens usually pick randomly. They're accepted the same, you still have to chase your own bank's ATMs to avoid unnecessary fees etc.

Re:Senators push to ditch social security numbers in light o... by dagw on Thursday November 09, 2017 @11:07AM (#15663511)
Makes no difference to the end user. My bank recently switched it's debit card from Visa to MC and it changed nothing for me.
Re:Senators push to ditch social security numbers in light o... by harryh on Wednesday November 08, 2017 @10:04PM (#15659481)
You can send wire transfers online in the US with most banks FWIW.
Re:Senators push to ditch social security numbers in light o... by krinchan on Thursday November 09, 2017 @11:59AM (#15663943)
On the other side though, EU wire transfers within SEPA cannot cost more than a domestic transfer and overall the domestic fees are insanely cheap, if not free.

In the USA, wire transfers average $10-25 on the outbound. Inbound, domestic wire transfers are often free, but inbound International transfers can run you $15.

This fee structure is why you see Vimeo and Square Cash (and PayPal before those) become so popular.

Re:Senators push to ditch social security numbers in light o... by ryanlol on Wednesday November 08, 2017 @11:07PM (#15659773)
Unless you already send wires regularly, they'll tell you to go to a branch once you click send.
Re:Senators push to ditch social security numbers in light o... by sib on Thursday November 09, 2017 @07:46PM (#15667070)
Not sure what bank you are working with, but that is not my experience (as a US citizen & resident). I have sent both domestic and international wires completely online.
Re:Senators push to ditch social security numbers in light o... by ryanlol on Saturday November 11, 2017 @11:53AM (#15677030)
> I have sent both domestic and international wires completely online.

Were these wires to a company that receives lots of similar wires? Do/did you have a history of sending wire transfers? Were any of these wire transfers a significant chunk of your account balance?

All of these things matter. In the US the average person is simply far more likely to be sent to the branch when wiring $10k than in EU.