News for hackers. Stuff that matters.
Re:DOJ: Hackers broke into an SEC database and made millions... by gtirloni on Wednesday January 16, 2019 @01:26PM (#18923441)
You mean they rely solely on someone dictating a SSN number? That's insane. They should ask for a official ID with photo, as the very minimum.

Is that something that goes against the American culture? The other day I had to give all 10 fingerprints to renew my driver's license (location: South America) and nobody seemed to care.

Re:DOJ: Hackers broke into an SEC database and made millions... by bobthepanda on Wednesday January 16, 2019 @02:38PM (#18924239)
America historically was not very federalized, and being able to just abandon your life and move out west is a key part of the country's mythology, if not the DNA of the country. So there have always been attempts to resist a national ID system, and the SSN was originally not supposed to be used for this purpose.

Of course in 2019 this is basically a moot point if you want to be integrated into society, but even then there are people who are legitimately not integrated into the modern US economy by choice.

Re:DOJ: Hackers broke into an SEC database and made millions... by Jedi72 on Wednesday January 16, 2019 @04:45PM (#18925691)
I have thought about this a little bit. If this is something Americans believe in, its time to make it official. Make a legal proceeding where you can "start again", so that nobody from your old life can trace you.
Re:DOJ: Hackers broke into an SEC database and made millions... by solotronics on Friday January 18, 2019 @12:57AM (#18937324)
From what I can tell you can go to California and say you are an immigrant and get an ID under any arbitrary name. It seems you can do anything with this so it's essentially a new identity.

https://www.nerdwallet.com/blog/banking/undocumented-immigra...

Re:DOJ: Hackers broke into an SEC database and made millions... by darkpuma on Thursday January 17, 2019 @02:00AM (#18928919)
Formalizing the process kind of misses the point.
Re:DOJ: Hackers broke into an SEC database and made millions... by LeifCarrotson on Wednesday January 16, 2019 @05:09PM (#18925968)
> Is that something that goes against the American culture?

Conservative Christian fundamentalist groups have, ever since Reagan, likened a national ID card to "the mark of the beast", citing Revelation 13's prophecy that no one could buy or sell goods without the number of the beast, and the reference to God's chosen people that refuse the mark of the Beast.

When a small but meaningful fraction of your constituents fervently believe that giving them a national ID literally damns them to Hell, it's a hard sell.

Much easier if you attach it to a tool (Social Security) with which they can get money.

There's also the angle of State's Rights and whether the federal government can require people to have national ID over just amalgamating the various state IDs.

Finally, Americans generally distrust their government. Not without reason, they believe a national ID would reduce their privacy and allow the government to more easily spy on and track them.

Re:DOJ: Hackers broke into an SEC database and made millions... by jessaustin on Wednesday January 16, 2019 @05:14PM (#18926018)
Then again, you could be like my uncle. His SSN is 666-66-6666. He's not particularly religious...
Re:DOJ: Hackers broke into an SEC database and made millions... by jrpelkonen on Wednesday January 16, 2019 @10:09PM (#18927997)
There’s a chance your uncle made that one up himself: “No SSNs with an area number of 666 have been or will be assigned.”[0]

[0] https://www.ssa.gov/policy/docs/ssb/v69n2/v69n2p55.html

Re:DOJ: Hackers broke into an SEC database and made millions... by jessaustin on Thursday January 17, 2019 @07:46PM (#18936070)
There's a chance I made up that uncle myself... it's easier than using Google to find this information.
Re:DOJ: Hackers broke into an SEC database and made millions... by jandrese on Wednesday January 16, 2019 @03:28PM (#18924775)
SSN is often used as an account verification, which is a problem because social engineers can get your SSN pretty easily.

It's hard for a phone bank operator to ask for a photo ID.

Re:DOJ: Hackers broke into an SEC database and made millions... by __david__ on Friday January 18, 2019 @04:02AM (#18938005)
I used to give out fake SSNs to everyone that insisted on one (normally I just leave that part of a form blank). The first time someone asked for the last four digits of one of my fakes I had to scramble to remember what random number I had given out. I never considered that might actually be better security.
Re:DOJ: Hackers broke into an SEC database and made millions... by jandrese on Friday January 18, 2019 @02:00PM (#18941860)
Downside of this solution is that many companies ask for it so they can do a credit check. Giving them a fake number could technically be fraud.
Re:DOJ: Hackers broke into an SEC database and made millions... by rootusrootus on Wednesday January 16, 2019 @03:31PM (#18924814)
We don't require a full set of fingerprints to renew your driver's license, but we do require proof of citizenship and residence. As a practical matter, for most people that means birth certificate and a utility bill with their address on it.

I assume the fingerprints thing is for future crime solving?

Re:DOJ: Hackers broke into an SEC database and made millions... by jessaustin on Wednesday January 16, 2019 @05:19PM (#18926055)
A giant database of fingerprints is more likely to "solve" crimes than solve them. This statistical mistake even has a name: "the prosecutor's fallacy". (It could be that police detectives deserve to name this trope more than prosecutors do, but it's probably too late now.)
Re:DOJ: Hackers broke into an SEC database and made millions... by mplewis on Wednesday January 16, 2019 @01:35PM (#18923527)
That'll be leaked eventually, too.
Re:DOJ: Hackers broke into an SEC database and made millions... by gtirloni on Wednesday January 16, 2019 @01:43PM (#18923640)
That's a fact of life. I'm talking about how they are determining identity. Just asking for a SSN number is mostly like dealing with anonymous people (thus my question about culture).
Re:DOJ: Hackers broke into an SEC database and made millions... by blancheneige on Wednesday January 16, 2019 @03:53PM (#18925053)
there are places here that will let you vote for the president of the united states without requiring proof that you are a US citizen. what do you expect.
Re:DOJ: Hackers broke into an SEC database and made millions... by wtvanhest on Wednesday January 16, 2019 @04:31PM (#18925520)
That really isn't a big deal since you need to prove residence to register. There are a limited number of votes that can be made. If two people show up saying they are the same person, that will create a red flag.