My Data Request: Request your data from over 100 companies

Re:My Data Request: Request your data from over 100 companies by toxicFork on Sunday June 17, 2018 @04:43PM (#17334233)

They still need to defend against malicious requests; for example how do you know that it's not someone's potential enemy requesting for that information?

[ Parent | on HN ]

Re:My Data Request: Request your data from over 100 companies by Rjevski on Monday June 18, 2018 @02:53AM (#17336398)

But unless they had your ID before, how can they tell it’s the ID of the account owner and not a homonym?

Also how would they defend against fake IDs? If the purpose is to prevent malicious access then they better expect that attackers will try and use fakes.

[ Parent | on HN ]

Re:My Data Request: Request your data from over 100 companies by a_imho on Monday June 18, 2018 @03:59AM (#17336589)

They need to resort to the mechanism agreed upfront to prove identity. Usernames, emails, numbers + passwords, keys etc.

At this point I see this practice mostly as deterrance with a little cya mixed in, possibly with a pinch of data fishing in some rare cases.

However in the future I'm all for providing IDs as a requirement to use webservices if that makes people more conscious about what data they share.

[ Parent | on HN ]