News for hackers. Stuff that matters.
Re:DOJ: Hackers broke into an SEC database and made millions... by fixermark on Wednesday January 16, 2019 @12:26PM (#18922772)
SSNs were never designed for, nor intended for, secrecy.

They're names, not passcodes.

Re:DOJ: Hackers broke into an SEC database and made millions... by jMyles on Wednesday January 16, 2019 @12:37PM (#18922888)
SSNs were never designed for, nor intended as, identification. For years, social security cards bore the text "NOT FOR IDENTIFICATION" on the front.

https://www.npr.org/2018/03/22/596180023/how-social-security...

Re:DOJ: Hackers broke into an SEC database and made millions... by andrewla on Wednesday January 16, 2019 @12:57PM (#18923115)
My understanding is that that warning applied to the card itself, not to the number. That is, the bearer of that card has no provable relationship to the social security number on the card as it contains no attestable information (like a photograph or general description) so the card cannot be used for identification.

The number itself is of course used for identification from the beginning as a unique identifier for your "account" in the social security administration.

Re:DOJ: Hackers broke into an SEC database and made millions... by thefifthsetpin on Wednesday January 16, 2019 @02:13PM (#18923948)
The problem you see with using the card itself as identification of course also applies to using the number itself as identification.
Re:DOJ: Hackers broke into an SEC database and made millions... by jandrese on Wednesday January 16, 2019 @03:29PM (#18924790)
Also, the card has zero anti-forgery technology built into it. Anybody with a printer can make a near-perfect fake.
Re:DOJ: Hackers broke into an SEC database and made millions... by wuliwong on Wednesday January 16, 2019 @02:58PM (#18924434)
> In order to make Social Security work, the government needed a way to identify every single worker and keep track of their earnings every single year for the rest of their lives.

According to the article it seems that it was intended to be used for identification, just only for one purpose.

Re:DOJ: Hackers broke into an SEC database and made millions... by lotsofpulp on Wednesday January 16, 2019 @12:31PM (#18922822)
Exactly, so creating a government website where one can verify someone's SSN would render it useless as a password and force businesses to come up with a real solution.
Re:DOJ: Hackers broke into an SEC database and made millions... by kozziollek on Wednesday January 16, 2019 @12:35PM (#18922860)
There is great video about that by CGP Grey: https://www.youtube.com/watch?v=Erp8IAUouus
Re:DOJ: Hackers broke into an SEC database and made millions... by m-p-3 on Wednesday January 16, 2019 @01:28PM (#18923455)
Like biometrics but worse.