Re:Myequifax.com Bypasses Credit Freeze Pin
by orky56 on Friday March 08, 2019 @01:49PM
(#19340766)
SSN on its own is sufficient for verifying identity. SSN coupled with a phone verification step is more secure for authenticating than DOB.
[ Parent
| on HN ]
Re:Myequifax.com Bypasses Credit Freeze Pin
by craftyguy on Friday March 08, 2019 @02:32PM
(#19341319)
> SSN on its own is sufficient for verifying identity.
No. It's sufficient for identifying someone, but not at all sufficient (not even close) for verifying someone is who they say they are.
Re:Myequifax.com Bypasses Credit Freeze Pin
by mjevans on Saturday March 09, 2019 @04:52AM
(#19345390)
It's the difference between a user ID (be it a small integer or a long string) and actually authenticating to perform actions AS said user.
SSN as a user identifier - to uniquely describe an entity
Actual PKI including a secure public/private key with a signature from a trusted agent (like a government ID authority), and maybe also web-of-trust signatures? THAT is what is required to securely sign things.