News for hackers. Stuff that matters.
Re:How Equifax Became a Private IRS by coderintherye on Monday January 23, 2023 @09:32PM (#34498375)
One thing Matt mentions but doesn't go into is how this could (should?) be a government service. In fact, there is the IRS's IVES program: https://www.irs.gov/individuals/international-taxpayers/inco... but it is already fairly antiquated.

There's a great opportunity here for the IRS to provide this service (with revenue from charging the requesting entities), with citizens being self-sovereign over what data is shared and who it is shared with. Especially because they could provide verified data in a very narrow scope (for instance only sharing Adjusted Gross Income and nothing else).

Re:How Equifax Became a Private IRS by kevin_thibedeau on Monday January 23, 2023 @09:38PM (#34498427)
Equifax collects data that isn't true and libels its victims by disseminating it to other parties. Having that power enshrined within the government would not be a good thing.
Re:How Equifax Became a Private IRS by vuln on Monday January 23, 2023 @09:47PM (#34498486)
Only when you give said company authorization to review your credit worthiness, then they may attempt to pull your credit information.

Your information is not broadcasted to all companies in existence only those who you've authorized (or have been authorized on your behalf by a malicious actor / identify thief).

This is not udp.

Re:How Equifax Became a Private IRS by thephyber on Monday January 23, 2023 @11:14PM (#34499149)
Your first paragraph is true (to the extent that nobody pretends to have your authorization).

Your second paragraph is false, AFAIK. In the USA, credit bureaus are legally allowed to sell lots of your info to debt collectors and financial service companies. (According to DoanLaw.com) this is why you get “prescreening” offers for credit cards, mortgage refis, etc.

Re:How Equifax Became a Private IRS by vuln on Monday January 23, 2023 @11:21PM (#34499198)
I don't disagree that the companies are selling your contact information and most likely some fuzzy information ranges (age, gender, martial status, rent/own, income) that's all that's really needed to snail mail "pre approvals" hint you're not really approved for anything until you sign to allow them to actually pull your credit. Preapproved just means you meet the minimum threshold of potentially making them more money than the cost of a 50 cent envelope/paper/bulk mailing rate.
Re:How Equifax Became a Private IRS by thephyber on Monday January 23, 2023 @11:37PM (#34499336)
Agree that most of the data needed for a generic prescreening is available from lots of data brokerage (doesn’t necessarily need a credit bureau), but that DoanLaw.com article I read to verify my memory states that credit bureaus may legally sell some data points that can only accurately be sourced from a credit bureau.
Re:How Equifax Became a Private IRS by vuln on Tuesday January 24, 2023 @02:33AM (#34500578)
Would you mind sharing the article? I'd like to read more about which specific data points. Thanks!
Re:How Equifax Became a Private IRS by thephyber on Tuesday January 24, 2023 @06:32AM (#34502311)
Re:How Equifax Became a Private IRS by ethbr0 on Monday January 23, 2023 @11:28PM (#34499268)
Outside of state laws and HIPAA, what national laws in the United States limit information sharing from a private party?
Re:How Equifax Became a Private IRS by kevin_thibedeau on Tuesday January 24, 2023 @12:04AM (#34499540)
Video rental records is it. Everything else is up for sale.
Re:How Equifax Became a Private IRS by thephyber on Tuesday January 24, 2023 @06:43AM (#34502387)
I believe there are a number of siloed categories:

- HIPPA is for health care providers and their vendors

- Traditional wired telecom has long been protected. And fraud over telecom has a special wire fraud statute.

- Mail thru the USPS

- COPPA for PII of under 13 data

- Federal election law prevents election records used for commercial purposes

- basically all of the government classified data system

Re:How Equifax Became a Private IRS by alistairSH on Tuesday January 24, 2023 @12:08PM (#34506530)
- FERPA for data held by colleges/unis.
Re:How Equifax Became a Private IRS by Supermancho on Monday January 23, 2023 @11:57PM (#34499481)
> Your information is not broadcasted to all companies in existence only those who you've authorized

Famously, Experian ("freecreditreport.com") sold partially filled form information. This is before submission and up to 9 times. Feel free to go to the site signup today and watch the information being streamed (in a hashed form) from your developer console.

Re:How Equifax Became a Private IRS by hyperman1 on Tuesday January 24, 2023 @04:59AM (#34501715)
This seems a great opportunity. Fill in false information, don't submit it, and watch your credit score raise?
Re:How Equifax Became a Private IRS by Supermancho on Tuesday January 24, 2023 @11:59AM (#34506366)
Filling out a form has no bearing on your credit score. This mechanism is leveraged to monetize someone's information independent of that person's credit score or the accuracy of the information.
Re:How Equifax Became a Private IRS by jasonjayr on Monday January 23, 2023 @09:49PM (#34498505)
Why?

Government answers to it's people.

Equifax answers to it's shareholders.

IRS already has that info. The people have the power to control and influence how that data is handled, and distributed. We have no power to compel Equifax to do anything.

Re:How Equifax Became a Private IRS by fragmede on Monday January 23, 2023 @10:30PM (#34498802)
Government is able to compel Equifax to do things, and is run by we, the people, so it seems like we should be able to something, for sufficiently large and powerful numbers of "we".
Re:How Equifax Became a Private IRS by hoseja on Tuesday January 24, 2023 @08:11AM (#34503114)
Ah but you see, you're not friends with a senator.
Re:How Equifax Became a Private IRS by phpisthebest on Tuesday January 24, 2023 @08:58AM (#34503575)
>>Government answers to it's people.

That sir is the greatest lie ever told

Re:How Equifax Became a Private IRS by connor11528 on Tuesday January 24, 2023 @09:27AM (#34503929)
Matt addresses this in the article directly:

> Generally speaking, people would get really upset if the IRS shared our tax information for a fee. Effectively, Equifax is doing that, because for most people, employment and income is our tax information. But since it’s a private monopoly, the anti-government types don’t notice or care.

...

> It’s perhaps no exaggeration to note that Equifax is a quasi-governmental agency, a monopoly provider of evidence that you work, where you work, and what you make. If there’s an error, or if someone lies about you, too bad. If Equifax itself is paid to harm you, too bad. If a government agency gets the wrong data and denies you assistance or screws up your immigration status, that’s on you, well, you have limited to no rights in this situation. In some ways, you might have more to fear from Equifax than the IRS.

Re:How Equifax Became a Private IRS by tdeck on Monday January 23, 2023 @09:51PM (#34498524)
The government already has the power to do those things. The track record of credit reporting agencies shows it's almost impossible to hold them accountable, so what's the advantage to having these private entities profiting off of us again?
Re:How Equifax Became a Private IRS by Teever on Monday January 23, 2023 @11:25PM (#34499249)
That's a pretty disengenous argument.

I think you understand that the point of taking this course of action is to prevent/reduce these kinds of abuses from happening.

The goal isn't to enshrine abuse of authority in governmental agencies, but to prevent nongovernmental agencies from abusing that authority.

Re:How Equifax Became a Private IRS by dsfyu404ed on Tuesday January 24, 2023 @08:25AM (#34503224)
>The goal isn't to enshrine abuse of authority in governmental agencies, but to prevent nongovernmental agencies from abusing that authority.

I would much rather just whack the big players with antitrust law than give their power to some government agency. A worthless mission statement of some bureaucracy is just that, worthless. If said bureaucracy is using the same information Equifax is using to provide the same services the abuse potential is right there and it's probably only a matter of time until it starts getting used to screw whoever the outgroup of the minute is.

Re:How Equifax Became a Private IRS by mindslight on Tuesday January 24, 2023 @11:34AM (#34505924)
Antitrust law isn't a solution here. Many different surveillance companies keeping records on us provides the same problems (if not more) than one large company.

What is sorely needed is privacy legislation that says that data about an individual is fundamentally the property of that individual, and that the license for commercially possessing/processing an individual's data can be revoked at any time. Only then can there be competition in this market.

Re:How Equifax Became a Private IRS by Teever on Tuesday January 24, 2023 @01:13PM (#34507540)
I don't see why a market based solution is needed here.

What will having a market of providers for this service do for me that having a crown corporation or federal ministry won't?

Let's look at it the other way. Could you imagine privatizing the IRS. Why would I want that?

Re:How Equifax Became a Private IRS by SamuelAdams on Monday January 23, 2023 @09:50PM (#34498518)
This is a good idea, but I’m skeptical if the IRS has enough funding and resources to manage another service. They barely have enough funding for the current backlog of filed tax returns.
Re:How Equifax Became a Private IRS by grantc on Tuesday January 24, 2023 @12:26AM (#34499729)
The IRS can't even provide a simple reliable service to verify a TIN; they're not getting into the IVE game.
Re:How Equifax Became a Private IRS by refurb on Monday January 23, 2023 @09:53PM (#34498549)
There is no free lunch. Limiting credit checks to AGI just means everyone will assumed to have an unknown credit history and will have much higher rates.

You ready to get a mortgage at prime plus 5% instead of prime plus 1%?

But let me guess, we could create a law about that?

Having the government do things doesn’t magically mean market forces don’t apply any more.

Re:How Equifax Became a Private IRS by coderintherye on Monday January 23, 2023 @10:06PM (#34498628)
The point is not about limiting it to AGI, the point is setting limits on what data is shared so that you as the consumer always control what a requesting company sees. Don't want your data shared? No problem, you can set to deny all requests. Only want to share AGI but not your entire return, just allow that field, etc.

Correct me if I'm wrong, but your response also seems to indicate you don't work in financial services. No company is providing credit based solely on income verification (well, not that I'm aware of maybe some fintech is doing it). Most all credit providers are collating data from various sources to make their decision and it varies more than you might think on what goes into a credit decision.

Further, I don't think there's any need at all for laws for this as you suggest, rather just let the IRS offer it as a competing service with private industry. I know many companies that would sign up right away for such a service at the right price point.

Re:How Equifax Became a Private IRS by notinfuriated on Monday January 23, 2023 @10:38PM (#34498859)
> Correct me if I'm wrong, but your response also seems to indicate you don't work in financial services. No company is providing credit based solely on income verification (well, not that I'm aware of maybe some fintech is doing it). Most all credit providers are collating data from various sources to make their decision and it varies more than you might think on what goes into a credit decision.

I think you misunderstood the comment. It was pointing out that if they only have AGI to go by and no other information, the interest rate on a loan will be much higher, because even with AGI data, that's not enough to know that the borrower is going to pay reliably.

> Further, I don't think there's any need at all for laws for this as you suggest...

Commenter was actually not suggesting this either. It was a sarcastic question intended to point out the folly of assuming we can just create laws to fix market forces.

Re:How Equifax Became a Private IRS by vuln on Monday January 23, 2023 @10:13PM (#34498664)
People don't understand how credit scores work and you want to give them the power to allow granular permissions?

Just like Facebook gave people granular access to their privacy settings?

If the general population doesn't read EULAs and speed clicks through 99% of dialogs presented. I highly doubt people won't check the _allow all_ box once and be done with it.

Hell Apple gives my significant other the ability to ask apps not to track and they tap to ALLOW the app to track because "I don't mind ads and they'll show me better ads."

Re:How Equifax Became a Private IRS by j33zusjuice on Monday January 23, 2023 @11:39PM (#34499353)
Some percentage of people making bad decisions doesn’t mean all people should be forced to make bad decisions. Yes, it’s a good thing that Facebook and apple allow those controls. Yes, it’s a shame more people don’t care about controlling their data. That doesn’t mean people who do care shouldn’t be able to control it.

What point are you trying to make, exactly?

Re:How Equifax Became a Private IRS by foota on Monday January 23, 2023 @11:49PM (#34499424)
I believe their point is that if you don't provide any piece of information, the consumer of it would just assume the worst. Or, they would average it out, so that the burden of not being accurate would affect the people that do provide it.
Re:How Equifax Became a Private IRS by mindslight on Tuesday January 24, 2023 @01:05AM (#34499990)
> You ready to get a mortgage at prime plus 5% instead of prime plus 1%?

So then homes would become more affordable, as monthly payments are the limiting factor? Sounds like a win-win, if that actually were to happen. But it seems unlikely for secured credit.

Re:How Equifax Became a Private IRS by refurb on Tuesday January 24, 2023 @06:29AM (#34502293)
No, why would homes be more affordable? Credit would tighten up immensely starting with those who don’t have sufficient income.
Re:How Equifax Became a Private IRS by mindslight on Tuesday January 24, 2023 @11:21AM (#34505671)
The main factor for people buying houses is the monthly payment. When interest rates go down, abstract asset prices go up to compensate. When interest rates go up, abstract asset prices go down. So your scenario of interest rates going up would actually enable people to do things like make a larger downpayment (rather than suffering the PMI trap), and make it reasonable to pay off a mortgage early.

But as I said, the change in interest rates is unlikely to be that large for secured credit like a mortgage, as the main thing guaranteeing the loan is the asset itself.

Re:How Equifax Became a Private IRS by raverbashing on Tuesday January 24, 2023 @02:47AM (#34500701)
> You ready to get a mortgage at prime plus 5% instead of prime plus 1%?

And for that I had to pay interest/fees on all the other crap so that I "build a credit history"

Interesting, I wonder if someone did the math on that (and that 5% is overinflated I think not even the NINA loans were that high)

Re:How Equifax Became a Private IRS by refurb on Tuesday January 24, 2023 @05:04AM (#34501741)
What “interest and fees”?

I have a high credit score and have never paid a fee or any interest.

Re:How Equifax Became a Private IRS by raverbashing on Tuesday January 24, 2023 @05:22AM (#34501871)
CC Annuity? Or even the implied CC fees the purchaser pays indirectly by increased prices

Car payment interest? Student loans?

Re:How Equifax Became a Private IRS by refurb on Tuesday January 24, 2023 @06:24AM (#34502265)
I’ve never had a credit card with fees.

I built up a great credit score with a single, no fee card, that I paid off each month. Total cost $0.

You don’t need an interest paying loan to have a good credit score.

Re:How Equifax Became a Private IRS by tarranoth on Tuesday January 24, 2023 @06:56AM (#34502485)
I don't understand the US credit score at all. What's the predictive value of you paying off a mortgage based on you just shopping with a credit card? Sure if you can't pay your normal shopping cart, probably you shouldn't really be getting a mortgage, but the predictive value besides that seems lost on me. Surely a bank could just ask your payslip info and get a more accurate feel whether or not you are creditworthy?
Re:How Equifax Became a Private IRS by refurb on Tuesday January 24, 2023 @07:16AM (#34502651)
I don’t follow.

Shopping with a credit card literally involves managing a line of credit.

You don’t see how that relates to creditworthiness?

You also believe purely income information is a better indicator of credit worthiness? It tells you almost nothing (which is why income plus all current expenses is used).

Re:How Equifax Became a Private IRS by tarranoth on Tuesday January 24, 2023 @07:48AM (#34502930)
A mortgage is about the ability to pay back hundreds of thousands over an extremely long time period. Your normal shopping is a blip, and it makes barely any difference because normal people just use their credit card the same as if it was a debit one (the only difference you pay it off at the end of the month). So it doesn't tell me anything about your ability to handle real credit. What do I care that you pay off a 100-ish bucks a month by buying food? I don't think paying off your shopping cart is very impressive, and someone telling me "I've paid off my shopping carts for over 15 years" (which is what advice US people seem to throw around to use your credit card for) isn't going to impress me, yet this is what a company uses for important stuff? And at least employment status/income tells me something, rather than nothing.
Re:How Equifax Became a Private IRS by refurb on Tuesday January 24, 2023 @08:03PM (#34512945)
I don't think you understand how the average person handles credit card debt.

Plenty of people fail to pay even monthly credit card debt. That a massive,massive signal to how they'd handle larger amounts of credit.

Re:How Equifax Became a Private IRS by coldpie on Tuesday January 24, 2023 @09:20AM (#34503852)
> Surely a bank could just ask your payslip info and get a more accurate feel whether or not you are creditworthy?

They do that, too. You have to provide all of your income data over the past like 3 years and explain any extra income (why did your parents give you $1000 a couple years ago?). Credit score is just one more datapoint, and I think it's more about your score being "not bad" (i.e. you didn't screw a previous creditor) than it is about it being "good."

Re:How Equifax Became a Private IRS by mindslight on Tuesday January 24, 2023 @12:56AM (#34499927)
Or rather than further entrenching the idea, we could work towards effective privacy legislation and relegate all of these commercial surveillance databases to the dustbin of history.
Re:How Equifax Became a Private IRS by connor11528 on Tuesday January 24, 2023 @09:20AM (#34503846)
I could see the IRS offering some service to enter the market and compete with Equifax to bring more competition to the sector. They might have to compel Equifax to give up some data or data sources to the government and their competitors. The government did this in WW2, forcing companies to give trade secrets to their competitors so there would be a more resilient supply chain.

Something similar could be done to break up big banking if the US Postal Service allowed people to open up super simple checking and savings accounts.