News for hackers. Stuff that matters.
Re:DHS Announces Extension of Real ID Full Enforcement Deadline by marssaxman on Monday December 05, 2022 @07:56PM (#33874349)
Ok. Why do you say so? What would be the benefit?
Re:DHS Announces Extension of Real ID Full Enforcement Deadline by Godel_unicode on Monday December 05, 2022 @10:59PM (#33875751)
I don’t believe for one second that you don’t already know, but ok here you go.

https://www.ssa.gov/fraud/#:~:text=How%20to%20report%20fraud....

Re:DHS Announces Extension of Real ID Full Enforcement Deadline by marssaxman on Tuesday December 06, 2022 @09:03AM (#33879867)
Thanks for the reference. Your idea is that maintaining an official national database of people, linked to driver's licenses, would make it harder to commit fraud; is that right?

This was a genuine question. It's not obvious to me why it would matter which primary key people used in their customer databases, but fraud is also not something I worry about or really even think about.

Re:DHS Announces Extension of Real ID Full Enforcement Deadline by Godel_unicode on Tuesday December 06, 2022 @09:51AM (#33880853)
Nope. As I’ve said other places in this thread we should replace the social security card and number with a modern identity system.

Currently your SSN is your client secret, but it’s a terrible one and we should replace it with a more robust secret. I shouldn’t be able to steal your identity by knowing a short number with minimal entropy.