Re:Claimed AT&T hack of 70M customer records including SSN, ...
by 55873445216111 on Friday August 20, 2021 @12:51PM
(#28248246)
Yes! SSNs are already not private given the number of hacks that have occured. Today, the real damage comes from the fact that people/businesses still believe they are private. Publish a list of all SSNs would eliminate the misperception once and for all and force people to verify identity in a better way. SSNs should only ever be used for your employer knows how to report who paid what taxes to the IRS. If someone else wants to use my SSN to claim that they paid my taxes, fine with me!
[ Parent
| on HN ]
Re:Claimed AT&T hack of 70M customer records including SSN, ...
by barbazoo on Friday August 20, 2021 @12:59PM
(#28248368)
Not sure if it's a problem of perception or just the lack of legal responsibility. As long as the legal and financial risk isn't owned by the party using the SSN for a purpose they shouldn't (identification), nothing will change.
Re:Claimed AT&T hack of 70M customer records including SSN, ...
by rory on Friday August 20, 2021 @01:16PM
(#28248621)
100%. The very concept of "identity theft" feels like corporate newspeak to shift the onus of remediation from the party that actually got defrauded (the company) to someone uninvolved in the transaction.
Re:Claimed AT&T hack of 70M customer records including SSN, ...
by ryanlol on Friday August 20, 2021 @08:58PM
(#28253102)
How is the financial risk not owned by the party using the SSN for identification?
Guess who ends up footing the bill when a bank gives a loan to someone pretending to be you? Hint: It’s not you, and it’s not the fraudster either.
Re:Claimed AT&T hack of 70M customer records including SSN, ...
by nybble41 on Friday August 20, 2021 @02:42PM
(#28249792)
> SSNs should only ever be used for your employer knows how to report who paid what taxes to the IRS. If someone else wants to use my SSN to claim that they paid my taxes, fine with me!
That could go the other way, with someone else filing their income under your SSN without any corresponding withholding. This, too, needs better authentication than a mere SSN can provide.