News for hackers. Stuff that matters.

A comment on Claimed AT&T hack of 70M customer records including SSN, name, address. Parent comment

Re:Claimed AT&T hack of 70M customer records including SSN, ... by discardable_dan on Friday August 20, 2021 @02:27PM (#28249636)
In Denmark, you are issued a one-time pad. You get a new one with some frequency. If you lose it, you are issued a new one.

In that case, third parties could use a government website to get a row/col and ask you to verify, and the website could say yes/no. Yes, there is a risk of your one-time pad being stolen, but it is no greater than the current risk that any US citizen's tax documents or SS card can be stolen.

[ Parent | on HN ]
Re:Claimed AT&T hack of 70M customer records including SSN, ... by xxpor on Friday August 20, 2021 @03:58PM (#28250692)
How do they bootstrap the verification when you say you lost your key?
[ Parent | on HN ]
Re:Claimed AT&T hack of 70M customer records including SSN, ... by discardable_dan on Friday August 20, 2021 @05:01PM (#28251370)
You can read more here: https://www.wikiprocedure.com/index.php/Denmark_-_Replace_Lo...
[ Parent | on HN ]
Re:Claimed AT&T hack of 70M customer records including SSN, ... by mjevans on Friday August 20, 2021 @05:14PM (#28251480)
That's an annoying denial of service attack; and you would typically do this by making the burn require very little authentication and the recovery a visit to a local government office, such as the police or a court.
[ Parent | on HN ]