News for hackers. Stuff that matters.
Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by nateberkopec on Wednesday August 18, 2021 @12:53PM (#28223930)
With the frequency of these breaches, it feels like we are moving to a post-security world where SSNs and DOBs are simply public information.

Would that really be such a bad thing? Both seem completely replaceable as authentication steps.

Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by jvanderbot on Wednesday August 18, 2021 @01:00PM (#28224038)
As always comes up, its not really identity theft, as that information doesnt help you do anything but defraud banks who are not taking time to properly verify who they are lending to. We just call it that so it's not the bank's fault. "Your identity was stolen, we couldn't do anything! "

Check a photo ID. Check a public cert. Take a fingerprint.

Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by Buttons840 on Wednesday August 18, 2021 @01:23PM (#28224411)
This. A bank you've never heard of fails to identify someone they're giving money to? Your problem, even though you weren't even one of the parties involved.

Is a credit agency illegally spreading false information about you? Not their problem, after all, they can't be expected to know they're spreading false information. Also, they advertise that they are in possession of credit monitoring systems capable of detecting this false information. How is this not libel?

Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by lotsofpulp on Wednesday August 18, 2021 @01:05PM (#28224130)
I have heard that in some poorer countries, authorities are requiring fingerprints, passport size photos, and even video statements for certain transactions and real estate.
Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by jjtheblunt on Wednesday August 18, 2021 @12:58PM (#28224011)
up till late 1990s SSN and DOB were public information, as they were printed on never-secured student IDs in American schools, for instance, and who knows where those unprotected lists went.
Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by jgillette on Wednesday August 18, 2021 @02:00PM (#28224844)
my email address at the university from 2000-2003 had the last 4 of my SSN in it.
Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by withinboredom on Wednesday August 18, 2021 @02:40PM (#28225421)
I had orders in the military listing hundreds of people’s name and SSN. This was ~2007
Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by astura on Wednesday August 18, 2021 @10:40PM (#28229745)
This practice went on all the way into the mid-2000s at least (I graduated in 2006 and my SSN (which doubled as a student id) was printed on my student ID back then)
Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by x0x0 on Wednesday August 18, 2021 @03:47PM (#28226206)
My university used it as the student id, so who knows how many hundreds of places that got copied. Including smeared all over the virtual desktop systems as it was your login identifier.
Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by stretchwithme on Wednesday August 18, 2021 @01:00PM (#28224040)
Can you imagine a private company giving you an account number that you can use to do things without needing to know a password?

Would that situation persist for decades?

Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by miohtama on Wednesday August 18, 2021 @12:59PM (#28224031)
Most European countries have some sort of strong online authentication with two factor, so it is doable.
Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by stretchwithme on Wednesday August 18, 2021 @01:03PM (#28224106)
Of course it's doable.

But SSNs aren't even ONE factor.

It's time the US government entered the 21st century.

Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by stretchwithme on Wednesday August 18, 2021 @01:01PM (#28224056)
For example?
Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by Gwypaas on Wednesday August 18, 2021 @01:11PM (#28224244)
BankID in Sweden. Sucks that it is privately owned though.

https://en.m.wikipedia.org/wiki/BankID

Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by cryvate1284 on Wednesday August 18, 2021 @01:03PM (#28224091)
Not sure it's strong, but The Netherlands has DigiD with 2FA?
Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by withinboredom on Wednesday August 18, 2021 @02:42PM (#28225435)
I love DigiD. After coming from the US, it’s beautiful.
Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by tadfisher on Wednesday August 18, 2021 @01:11PM (#28224235)
When Social Security was introduced, the government encouraged people to get a tattoo of their SSN so they wouldn't forget it [1].

[1]: https://blog.nyhistory.org/tattoo-as-memory-prompt/

Re:T-Mobile: Breach Exposed SSN/DOB of 40M+ People by jaundermann on Wednesday August 18, 2021 @01:31PM (#28224516)
It seems like it was tattoo artists (not the government) recommending tattoos, as you would expect. It is still interesting, but a bit less sensationalist.