News for hackers. Stuff that matters.

A comment on Capital One’s breach was inevitable, because we did nothing after Equifax. Parent comment

Re:Capital One’s breach was inevitable, because we did nothi... by arbuge on Tuesday July 30, 2019 @11:13AM (#20565562)
> For the public system, assign to every participant a true unique identifier, rather than the SSN which explicitly states should not be used as such.

How do you make this proposed new unique identifier more secure than the (admittedly very unsecure) SSNs?

[ Parent | on HN ]
Re:Capital One’s breach was inevitable, because we did nothi... by rocqua on Wednesday July 31, 2019 @11:38AM (#20575293)
Only use it as an identifier, not as a part of authentication. The issues with using an SSN as a identifier (username) are:

1) Explicitly not meant as an identifier

2) Not unique

If not for 2, then the SSN could simply be repurposed to be this identifier.

[ Parent | on HN ]