News for hackers. Stuff that matters.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by hairofadog on Tuesday August 22, 2023 @02:34PM (#37226822)
It's definitely worth taking the time to set up a credit freeze with the three big agencies (Experian, TransUnion, Equifax). Initially setting it up is a pain in the butt and is rage-inducing, as you have to provide a bunch of personal data when the whole problem in the first place is that they're careless with your data.

However, once you've got it set up, it's very easy to freeze and unfreeze them. Just keep all the URLs, usernames, and passwords in a secure note somewhere, and any time you need to apply for credit, unfreeze them for a day or a week.

I used to have all sorts of identity theft problems (people taking out credit in my name) but Freezing my credit has solved it.

Experian: https://www.experian.com/freeze/center.html

TransUnion: https://www.transunion.com/credit-freeze

Equifax: https://www.equifax.com/personal/credit-report-services/cred...

I truly hate these companies but holding my nose and going through the process was worthwhile and I'd recommend it to anyone.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by TheFreim on Tuesday August 22, 2023 @02:48PM (#37226979)
I've never taken on any debt in my life, would I still need to do this or an I fine since I've never initialized anything in the first place?
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by somehnguy on Tuesday August 22, 2023 @03:03PM (#37227149)
Yes, still worthwhile. The bureaus collect all sorts of information and attach it to you regardless of whether the information is even correctly attributed. A freeze might prevent some of that nonsense.

I had a difficult time getting loans to go to college many years ago. Come to find out my credit was through the floor due to all 3 agencies misattributing dozens of pages of bad loans to me starting when I was only a toddler. The middle initials & socials were 1 character off each, but it all still went to my name.

Unfortunately I didn't have the knowledge to freeze my credit when I was 3 years old - my fault, I should have known I would later suffer the consequences of my inaction.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by samstave on Tuesday August 22, 2023 @04:19PM (#37227997)
You have to be the dumbest toddler I have ever met!

-

We need a financial revolution (which is what OWS was all about -- and you know how they responded to that - especially in SFO.... "people are mad at the FED!, so must remove all planter boxes in front of the SF FED and install giant granite bollards and update our lifting stop gate at the entrance - and we have to get our fed workers to stop bragging about their $30,000 a month bonuses loudly on BART (yes this is an actual thing)

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by hairofadog on Tuesday August 22, 2023 @02:54PM (#37227034)
That's a really good question that I don't know the answer to. I would guess that they have a file on you somehow – Utility bills? Landlords checking your credit? But I'm not confident enough to know what would be the best thing to do in that scenario.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by ohthatsnotright on Tuesday August 22, 2023 @02:59PM (#37227092)
In the US utilities are normally yet another credit reporting agency: https://www.consumerfinance.gov/consumer-tools/credit-report...
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by tylercrompton on Tuesday August 22, 2023 @03:14PM (#37227295)
It doesn't matter that you don't take on debt. The point is to protect yourself from unscrupulous individuals who want you to take on debt on their behalf.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by mhardcastle on Tuesday August 22, 2023 @03:03PM (#37227148)
Somebody using your social security number and other information would be able to apply for credit. As soon as they do that, the bureau(s) called by the lender would have a file on "you".

The federal government requires that all three major bureaus (Experian, Equifax, TransUnion) provide you one credit report each per year, for free. You can request it here, the official source for these mandated free reports:

https://www.annualcreditreport.com/index.action

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by TheFreim on Wednesday August 23, 2023 @12:04AM (#37231736)
Thank you for the information, I'll look into this.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by ccorcos on Tuesday August 22, 2023 @03:00PM (#37227108)
Do you have a credit card? That is technically debt.

If someone has your information, they can open a credit card under your name and max it out. Or even more common, they’ll get a car loan under your name. Since loans are furnished at the end of the day, they’ll often get 2 or 3 car loans in the same day.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by TheFreim on Wednesday August 23, 2023 @12:03AM (#37231727)
I don't have a credit card, I only ever pay using cash or debit card directly from my bank account.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by dogman144 on Tuesday August 22, 2023 @03:43PM (#37227628)
Full stop, yes you should freeze.

Issue isn’t if you have debt or not. Credit rating agencies start tracking very early, and what they’ll track for you is basically “no data/low credit score.”

That doesn’t mean you’re not in the system, or more importantly - doesn’t mean qn attacker can’t take out debt in your name.

A freeze is the only thing that stops this for you and your kids. I hate that it works this way but such is life.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by whimsicalism on Tuesday August 22, 2023 @04:11PM (#37227915)
> I've never taken on any debt in my life

Why not? Do you ever anticipate getting a mortgage? If yes, then you probably should be.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by ChrisMarshallNY on Tuesday August 22, 2023 @04:20PM (#37228016)
Sadly, if they are under 35, they may never have the chance. Home ownership seems to be going the way of the Dodo.

But credit scores are used for apartment rentals, and even employment.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by PaulDavisThe1st on Tuesday August 22, 2023 @04:37PM (#37228190)
> if they are under 35, they may never have the chance. Home ownership seems to be going the way of the Dodo.

This is false.

Millenials are trailing previous generations a little, but > 50% of them now own homes:

https://rentalhousingjournal.com/more-than-50-percent-of-mil...

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by SketchySeaBeast on Tuesday August 22, 2023 @04:45PM (#37228274)
Hmm, given the average age of a millenial is ~33 the statistic and the claim (exaggerated as it is) don't necessarily need to be totally out of alignment.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by PaulDavisThe1st on Tuesday August 22, 2023 @05:36PM (#37228840)
The primary problem with this claim as it usually presented is that it tends to ignore that earlier generations did not go from kindergarten to home ownership in a year: you grow up with your parents' generation's condition as "normal" when it actually represents 30-50 years of "accumulation".

So yeah, 10 years ago, very, very few millenials owned a home. But that was true for 23 year old boomers too.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by SketchySeaBeast on Tuesday August 22, 2023 @09:10PM (#37230693)
You can look at that data too.

https://www.forbes.com/sites/katherinehamilton/2023/04/21/ge...

Millennials own less homes than boomers did at their age. Though based upon the data Gen Z is possibly turning things around.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by deprecative on Tuesday August 22, 2023 @05:11PM (#37228579)
Anecdotal though it is most millennials I know that have houses only have them because they were inherited rather than purchased outright.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by delecti on Tuesday August 22, 2023 @05:36PM (#37228836)
Also anecdotal, none of the millennials homeowners I know inherited them, but all are software developers.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by PaulDavisThe1st on Tuesday August 22, 2023 @06:48PM (#37229604)
See also:

"Most US millennials finally own homes – and it’s not thanks to their parents"

https://www.theguardian.com/us-news/2023/aug/17/millennial-h...

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by Tanoc on Tuesday August 22, 2023 @09:58PM (#37230990)
Out of my international circle of friends between twenty five and forty, only one outright owns their own house. And they have a high paying internal software development job for a big European company. The rest of us either split rent or live with family. Those of us in said circle living in the U.S. will likely never own houses because of what ChrismarshallNY below stated: The few places that aren't McMansions and aren't in HOA developments and thus are actually affordable are being bought by massive investment firms and flipped into being duplexes for rental.

Even the trailer parks aren't safe, as the companies buy them from the owners, evict all the tenants living in their own houses, and then develop the land into more unaffordable HOA clone mega houses, luxury apartments, or McMansions. Near where I live six of the eight trailer parks have disappeared in the last four years and have been turned into two separate campgrounds, a car wash, a dirt parking lot waiting to be redeveloped, a warehouse, and a new luxury senior apartment complex, with intent to redevelop the others into retail or housing shortly. There's been a spike in homelessness because the people living in these trailer homes couldn't afford to move their houses and didn't have anywhere left to go even if they could.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by PaulDavisThe1st on Wednesday August 23, 2023 @09:41AM (#37235697)
I see a few options with this of anecdote.

1. just ignore it, on the basis that the statistical data collected by many private organizations and the federal government say that it is incorrect.

2. as much as I hate quoting Bezos, he does have a good line about how, if anecdotes and data don't align, there's probably something wrong with the way the data is being measured and/or collected.

3. Accept that the data is correct, and that this sort of anecdotal reporting is also correct, but represents conditions that were also the case for previous generations yet somehow never became part of the zeitgeist.

I don't know which to choose. Maybe there are others.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by ChrisMarshallNY on Tuesday August 22, 2023 @06:07PM (#37229193)
Depends. These massive investment corporations are buying up houses like crazy.

I have a friend that works for one, and he's making a lot of money.

They come in, overbid, pay cash, and frequently spiff the agents (in a legal way).

Then they gut the place, and turn it into a pretty decent rental.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by PaulDavisThe1st on Tuesday August 22, 2023 @08:26PM (#37230392)
How does that relate to records of individual home ownership, by age?
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by ChrisMarshallNY on Tuesday August 22, 2023 @09:10PM (#37230691)
Huh?

If you don't think these rental investment corporations are a problem, then I won't gainsay that. I just have some local IRL experience in the matter, and have seen it discussed.

I'm not in a debate. I made an offhand comment, which was not unique to me (it has been bandied about in popular culture for quite some time), you called it "false," in a fairly harsh manner, and I didn't attack back, because I like to behave myself, here.

If my offhand comment offended you, then I am sincerely sorry, and you have my apology, but it won't change the way I think or interact, and I'll likely offend again. I'm a decent person, and don't mean to offend, but I also have the approach I have, and some people find it offensive. I'm not sure why, because no one ever takes the time to explain. They just attack. I've learned not to attack back, and make my best guess at what their problem was. Given that data (my guess), I may (or may not) choose to modify my approach in future interactions.

In the aggregate, I yam what I yam, and some folks like it, and some folks don’t. Seems most folks find me easy to get along with.

No worries. It's all good. Have a great day!

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by PaulDavisThe1st on Wednesday August 23, 2023 @09:50AM (#37235838)
I'm not offended, and I'm not attacking you.

You made a remark about millenial home ownership that, according to data collected by the relevant agencies, doesn't appear to be correct.

I just pointed out that millenial home ownership is only a little behind the age-adjusted levels for the last 4 "generations".

I think this is important - if the data is correct, then it's essentially a myth that millenials have no access to home ownership, and there's a certain kind of psycho-social danger to this idea being believed (particularly among millenials).

It is of course possible that the data is incorrect, or misleading, and I'm interested in that possibility, because the "story" about millenials and home ownership is widespread, and perhaps we should be alert to the idea that the data is not representing reality correctly.

Then you mentioned corporate residential real estate investment, which I certainly agree is a problem, but that seems orthogonal to the basic question of whether or not millenials do or do not own housing at roughly the same level as prior generations. I wondered if you saw some specific reason to mention it. If it were true that they do not, then certainly corporate RE investment could be a part of the reason. But it appears that in broad terms, they do, and so although it would be nice to end corporate RE investment somehow, it doesn't seem to be a particularly large problem.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by datavirtue on Tuesday August 22, 2023 @05:01PM (#37228469)
It's worse for renters. Any arbitrary thing could cause them to be denied for a rental. Good luck fishing out what that is at each rental company/landlord.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by TheFreim on Wednesday August 23, 2023 @12:04AM (#37231733)
I don't plan on ever getting a mortgage. I am extremely debt averse, I'd rather live frugally than essentially being a slave to the bank/creditor for years.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by whimsicalism on Wednesday August 23, 2023 @01:41PM (#37239526)
This will also impede your ability to get rentals.

I only take on debt I can immediately pay off (ie. credit card debt), but it still is important to demonstrate to creditors.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by gumby on Tuesday August 22, 2023 @05:35PM (#37228830)
Like FB, LinkedIn etc the credit bureaux maintain a file on everyone they come across. So they likely have a file on you regardless.

In addition, in the US these files are used for other purposes than taking out a loan, for example renting an apartment, for some jobs, etc.

I recommend building up a credit history even if you don't need it now. You might later. There are plenty of articles on the web about how to start, basically getting a credit card (perhaps secured) and slowly building up your credit.

I am lucky enough to be a cash buyer. I tried to rent a house for a year a few months ago but my credit rating was not good enough. I have a couple of credit cards which I pay off every month (so good, my credit utilization is low) but by the rating companys' POV there wasn't enough to go on: not enough accounts, and no accounts apart from the CCs: no mortgage, no car payments etc. The fact that I'm a homeowner doesn't appear in the report.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by dylan604 on Tuesday August 22, 2023 @07:23PM (#37229888)
First, you should take this quiz by telling "us" your mother's maiden name, the name of the street you grew up on, your elementary school's name, the name of your first grade teacher, the name of your first pet, the make/model of your first car, and to help make sure we know it's you, please enter your SSN# which also helps keep all of this info from being confused with someone else. After all of that, please, continue to avoid taking on any debt. We will relieve you of that burden
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by lr4444lr on Tuesday August 22, 2023 @09:40PM (#37230862)
Have you paid a utility bill? Signed up for a utility account? Had a credit check run for an apartment for made payments on a lease? You are probably in the system. Learn to play it before it plays you.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by alfon on Tuesday August 22, 2023 @03:15PM (#37227313)
Would a credit freeze prevent data brokers also accessing the credit header?
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by hairofadog on Tuesday August 22, 2023 @03:33PM (#37227510)
Seems like no or maybe but probably no, according to these sources:

https://privacyrights.org/resources/availability-sensitive-i...

https://www.reddit.com/r/privacy/comments/10boag2/whats_the_...

However, my SSN definitely got out there somehow (SSN is available in the credit header, according to the privacyrights.org article), and the freeze stopped some rampant problems I was having. The breaking point was when I came home one day to find a $2,000 Nordictrack rowing machine on my front porch which someone in far-away Wisconsin had ordered (which I assume they had intended to have shipped to themselves in Wisconsin). It took me a long time to get NordicTrack to agree to take it back and cancel the debt.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by oxygen_crisis on Tuesday August 22, 2023 @03:24PM (#37227418)
Obligatory rant against the "Identity Theft" deception promoted by banks.

The victims of fraud in these cases is the banks, not you.

You still have your identity. The banks/creditors gave their money (not yours) to a criminal through their own neglect.

It's an unconscionable fantasy that you as an individual are the victim in these situations when you had no involvement whatsoever.

Laws need to be updated to reflect this reality. Banks will continue to act haphazardly so long as they are allowed to pass the bill for their own carelessness onto innocent people.

Awareness should be spread by disavowing the entire "identity theft" deceit any time it comes up in a public forum.

Highly relevant Mitchell and Webb radio skit:

https://www.youtube.com/watch?v=CS9ptA3Ya9E

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by zamadatix on Tuesday August 22, 2023 @03:36PM (#37227543)
You build up a reputation for being a reliable borrower of debts or a good/clean societal record and someone steals that identity to abuse it and leave you with the baggage. You report "Identity Theft" to regain that identity and reputation, not on behalf of the money banks lost to fraudsters, hence the name.

There are plenty of things wrong with the current credit identity system, the name of identity theft is either not one of them at all or near the bottom of the list.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by oxygen_crisis on Tuesday August 22, 2023 @03:42PM (#37227609)
> someone steals that identity

This is exactly the fantasy that we need to dispel, not rationalize.

Nobody steals your identity. You always have your identity, and nobody else ever does. Your identity is not the few pieces of trivia a criminal can easily discover about you.

The criminal never takes or has your identity. The bank is simply neglecting to correctly identify someone.

> steals that identity to abuse it

Criminals are not abusing your identity, they are abusing the banks' careless failure to correctly identify people.

> to abuse it and leave you with the baggage

The criminal is not leaving you with the baggage, the bank is. They use willfully inept processes, because they have tricked you into believing you should bear the responsibility for the consequences of their own hubris.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by vineyardmike on Tuesday August 22, 2023 @04:19PM (#37228008)
I mostly agree with you that banks are hiding their victim status but I think your framing is too intense. The magical idea of identity as an intangible self isn’t helpful.

It is bank fraud and imitation with the intent to abuse the reputation of the person imitated. It should be illegal to imitate you when it negatively hurts you. It’s illegal to imitate police and doctors etc because it uses their reputations for fraudulent means. This is the same thing.

Banks are the financially defrauded victims in this situation, but the victims are also individuals because banks passed the reputational risk of fraud to the customers. If your credit score is hurt and you need to hire lawyers to fix it or you get denied for a mortgage (or just a good rate), you’ve experienced tangible harm.

Banks know they experience harm here. They plan for it. It’s baked into the prices and financial statements. Read the essays by Patrick McKenzie, he’ll argue that fraud is intentionally tolerated. They know that the consumer won’t be expected pay once the fraud is discovered. That’s not their goal, and they’re not being deceitful here.

You can argue if this system is overall good or bad, but it almost certainly has led to cheaper credit for everyone. Outsourcing credit worthiness to a magic national number (or 3) is cheaper than every credit union assessing risk themselves, with less knowledge.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by oxygen_crisis on Tuesday August 22, 2023 @04:31PM (#37228159)
> the victims are also individuals because banks passed the reputational risk of fraud to the customers

In that case I am not a victim of the fraudster, I am a victim of the bank.

The banks do not have sufficient incentive to improve their identification methods, so long as we tolerate the concept that we bear any responsibility for a transaction that involves only themselves and a fraudster who knows the answers to a few trivia questions about me.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by true_religion on Tuesday August 22, 2023 @07:11PM (#37229795)
It’s like defamation. If someone goes and spreads a bunch of terrible lies about you by pretending to be you… then you are their victim.

You’re not the victim of people who merely believe the lies and start to avoid you.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by ethanwillis on Tuesday August 22, 2023 @09:00PM (#37230617)
That's not a good analogy. If those people believe the fraudster and give them something.. I'm not liable for whatever they gave that person. You're leaving out the most important part. Avoiding != Requiring something.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by true_religion on Tuesday August 22, 2023 @09:47PM (#37230915)
I think I was focusing on the fact that identity fraud ruins your credit score, so you can’t get loans and the such for yourself.

To me that was akin to being ostracized because your reputation was ruined by an impersonation.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by HWR_14 on Tuesday August 22, 2023 @09:54PM (#37230963)
But most victims of identity theft don't have to repay the loans. They just have ruined credit scores. So I think it's an excellent analogy
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by vineyardmike on Tuesday August 22, 2023 @09:32PM (#37230818)
> The banks do not have sufficient incentive to improve their identification methods

On the contrary, they stand to risk 100% of the loaned money. What more could be at risk. Also the fair credit reporting act has pretty strict requirements for what a bank or credit agency should do when you’ve told them the debt is fraudulent, returning you to whole eventual.

What would be required to fix false identity frauds? Is that more or less tolerable for society than X% of people dealing with a stolen identity. What about people who have some problematic history (ran away from home, prior homeless, etc)? How would strict requirements impact them?

Really I guess my question. Oxygen_crisis, why do you believe identity theft is actually a problem that needs solving?

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by ifyoubuildit on Tuesday August 22, 2023 @05:41PM (#37228903)
> It is bank fraud and imitation with the intent to abuse the reputation of the person imitated. It should be illegal to imitate you when it negatively hurts you.

I think the argument is that the hurt is generated by the bank. Why isn't it the bank's responsibility to have their shit together and not do that?

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by krupan on Tuesday August 22, 2023 @05:49PM (#37228982)
You are not wrong at all. There is a certain level of fraud tolerated by banks so that they can more easily make loans to people. It's the classic security vs. convenience trade-off.

Two big problems are:

1. If you happen to be one of the victims of the fraud, it hurts! Sometimes a lot! A lot more than it hurts the bank.

2. If you don't like the level of (in)security that the banks have chosen, what other options do you have? Right now I don't know, I think maybe Bitcoin is your best bet?

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by emodendroket on Tuesday August 22, 2023 @06:37PM (#37229508)
Even if I pretend for a minute to seriously believe Bitcoin is less susceptible to fraud, using a different financial product doesn't help since the entire fraud takes place without your participation.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by HWR_14 on Tuesday August 22, 2023 @09:59PM (#37231001)
I don't see how bitcoin changes much, other than you have to convince CoinBase that it wasn't your identity. Bitcoin specifically tries to avoid being tied to identity.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by ffhhttt on Wednesday August 23, 2023 @07:33AM (#37234323)
> Bitcoin is your best bet?

Because nobody can take out a fraudulent loan in bitcoin? Well.. that’s problem accurate.

I’m just not sure how is bitcoin even the tiniest bit relevant in this case?

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by emodendroket on Tuesday August 22, 2023 @07:12PM (#37229810)
It might generate even cheaper credit if the banks were allowed to randomly seize your assets whenever they felt like it with no justification whatever, so long as you weren't one of the unlucky targets.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by prawn on Tuesday August 22, 2023 @10:15PM (#37231110)
There seem to be stories in these comments that leave consumers as victims without there being any intentional imitation. e.g., the five year old child getting mortgage payment demands. Or the person struggling to get a mortgage because of someone else with the same name but different age.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by zamadatix on Tuesday August 22, 2023 @04:09PM (#37227892)
Having your identity stolen and having your identity permanently removed are not identical actions. If I use a keylogger to grab your passwords and impersonate you in emails, forums, and so on then your identity is stolen, it's in use by someone else instead of you without consent for a period of time. This does not mean your identity has been removed from you permanently. This also does not mean your identity was always in your control just because the sites should have done more verification to see if it was you. It was still stolen but the fraud wasn't caught, and the lost money due to fraud falls between the criminal and 3rd party regardless independent of your identity being fraudulently used. Keep in mind that's how it is today, if your identity is stolen it is already the bank that eats the loss due to fraudulent lending.

If you still disagree please try to make an argument without mentioning banks. Identity theft covers a lot more than banking fraud so the explanation shouldn't explain how you want the term to be changed to something which focuses solely on banks.

The processes in place do suck. That has nothing to do with the name of the crime though.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by s__s on Tuesday August 22, 2023 @04:26PM (#37228096)
Identity can’t be stolen. You can be impersonated. I think the point they’re making is that it’s not the victims fault if someone is impersonating them. I would agree. It makes zero sense for the victim of impersonation to be held accountable in any way for the actions of the criminal.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by zamadatix on Tuesday August 22, 2023 @04:52PM (#37228362)
There is just more than a singular definition of identity in English and one of them can't be stolen while several others can. Impersonation is one way of stealing one of those definitions identity theft refers to. This doesn't mean the definition of identity is simultaneously violated.

The victim of impersonation isn't held accountable for the action of the criminal, particularly with banks. That's precisely what identity theft laws protect. I'm in favor of making that process even easier for the victim wherever possible but changing the name is not that.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by oxygen_crisis on Tuesday August 22, 2023 @04:17PM (#37227982)
> identity, noun, The condition of being a certain person or thing.

Someone who steals my passwords can impersonate me, they can not become me. Someone who tricks people into thinking they are me is still not me. An account is not an identity.

My online accounts are not me, and I am not my online accounts.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by zamadatix on Tuesday August 22, 2023 @04:24PM (#37228061)
There are many dictionary definitions of identity. Take Merriam-Webster:

"1a: the distinguishing character or personality of an individual

2: the condition of being the same with something described or asserted

3a: sameness of essential or generic character in different instances"

Or the Cambridge dictionary:

"a person's name and other facts about who they are:"

Of course, you're always welcome to intentionally pick the incorrect context (going back to Merriam-Webster):

"4: an equation that is satisfied for all values of the symbols"

And just as easily rant the name of the crime has nothing to do with math so it needs to be renamed.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by oxygen_crisis on Tuesday August 22, 2023 @08:33PM (#37230434)
If it's open to interpretation, you're choosing the worst interpretation.

How this is interpreted is the primary problem that needs to be solved in order to legislate the issue, and from the interpretations you're supporting, it seems you're firmly on the side of the parties failing to identify fraudsters correctly, versus the innocent individuals.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by zamadatix on Thursday August 24, 2023 @11:26AM (#37249937)
"Worst interpretation" isn't about matter of preference on which interpretation is moral rather intentionally choosing the least supportive definition as proof the phrase is a misnomer. Ignoring the Cambridge one, which seems to be post phrase, definitions like "sameness of essential or generic character in different instances" are very stealable things, even if another definition is not.

As I've stated I'm in favor of the individuals. When doing so, I like to stick to factual and logical reasons why instead of insist the root of the problem is the chosen definition of "identity" does not match my preferred one. The root of the problem is the current process for dealing with identity theft is more burdensome than it needs to be on individuals. If you change the name it's still too burdensome because, outside of you, everyone already interprets "identity" to mean what it should in this case. That the process is bad is not proof the interpretation of the phrase is bad and needs to be fixed, it's proof the process is bad and needs to be fixed.

Just because someone disagrees with one component of your stance does not mean they automatically agree with all opposing positions that followed from it.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by jfengel on Tuesday August 22, 2023 @04:55PM (#37228399)
If you still disagree please try to make an argument without mentioning banks.

I don't think it's possible to avoid mentioning the banks. They are the ones committing the harm against you.

They are a stand-in for numerous other institutions who abuse you. You can take the name "bank" to mean any organization who is defrauded, and then abuses you to obtain repayment for that fraud.

I think it's important to recognize that this is a two-step process. The middle-man in this procedure is crucial, because they are the ones with a lot of power to use the legal system against you. If they were somebody other than a bank or other significant corporation, you'd be able to say, "No, I'm not the John Smith you gave money to. Go away and find that person." The imbalance makes it necessary to define the argument in terms of banks and similar institutions.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by zamadatix on Tuesday August 22, 2023 @05:07PM (#37228531)
Criminal identity theft is one class of examples. An example scenario from this class is someone passes your identifiers off as theirs while committing a crime. Nobody was defrauded, no money exchanged, but you'll still want to report identity theft.

Claiming identity theft is precisely the process to notify the bank (or others) they cannot legally abuse you to get repayment for that fraud or you are not responsible for those crimes or whatever occured on your behalf. Under identity theft laws they are responsible for the loss due to fraud, not you. The same as credit card companies. The legal system is used but as much by you saying "I didn't buy that house, clear my records and eat the losses" as by the bank initially saying "this person didn't pay their loan". To not involve the legal system by both parties just opens up an even worse can of worms of fraud.

One thing I do agree on is that anything that can reasonably be done to make the process easier on the victim of identity theft should be as the process is too hard on them right now. Probably more fines to most middlemen to increase the cost further beyond their losses. I just don't think changing the name of the crime has anything to do with that kind of improvement.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by oxygen_crisis on Tuesday August 22, 2023 @09:12PM (#37230703)
> If I use a keylogger to grab your passwords and impersonate you in emails, forums, and so on then your identity is stolen

This is actually a great example.

If you impersonate me in an e-mail and talk someone into sending a thousand dollars they owed me into some strange account, a reasonable victim isn't going to come to me and say "we're square now, because I paid that fraudster's account what I owed you."

Instead they should admit they made a mistake in assuming it was me based on suspiciously inadequate information and pursue the fraudster if they want their money back.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by dragonwriter on Tuesday August 22, 2023 @04:29PM (#37228123)
What is stolen is information relied on for authentication, but using “identity” with that meaning is common, even in technology.

That is, after all, what an “identity provider” actually provides.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by drdaeman on Tuesday August 22, 2023 @09:22PM (#37230765)
"Identity provider" in technology is something that should be disavowed heavily, too. Identity is hard to define, but it's definitely not something that should be provided, unless we're talking about assuming others' identities.

Giving up ownership of our own identities led to very harmful results.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by GauntletWizard on Tuesday August 22, 2023 @04:05PM (#37227847)
You're confusing two concepts that share a word: Your identity in the sense of self worth and personal ideals, and other people's view of you, your identity to them - Their interpretation of the former, to some extent, but also their judgements on your trustworthiness.

It's the latter that's being stolen. It's a crime against both you and your friends and creditors.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by YVoyiatzis on Tuesday August 22, 2023 @03:58PM (#37227779)
Often, bankers themselves are the fraudsters.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by failbuffer on Tuesday August 22, 2023 @05:29PM (#37228764)
If you want to sell this idea you at least need to have a name for it.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by xboxnolifes on Tuesday August 22, 2023 @05:45PM (#37228941)
Fraud. It's called fraud. Someone is defrauding the bank. The bank is the victim. However, the person whose identity was referenced by the criminal has nothing to do with the interaction. The criminal did not steal an identity. They stole money from a bank through fraud.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by bigmofo on Tuesday August 22, 2023 @06:01PM (#37229122)
Lets take this one step farther, call it identity fraud and not just fraud; otherwise, identity theft will probably be with us.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by emodendroket on Tuesday August 22, 2023 @07:11PM (#37229794)
That term was already coined as a synonym. I wonder which form of fraud does not involve some kind of misrepresentation though. What makes it notable that a person who actually exists is being used as the conman's fictitious identity if we aren't interested in somehow offloading the risk to that person? Presumably this happened before the 1960s when it began to be called "identity theft" (and if you look at an ngram the term really only comes to be widely used in the mid-to-late 90s).
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by dylan604 on Tuesday August 22, 2023 @07:20PM (#37229869)
>Banks will continue to act haphazardly so long as they are allowed to pass the bill for their own carelessness onto innocent people.

I kind of feel like banks are fans of one mister Dewey Crowe, "The anus is upon you" to protect your data. (https://www.imdb.com/title/tt1489428/characters/nm0380632?re...)

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by Rygian on Tuesday August 22, 2023 @03:45PM (#37227650)
Why is it not the default?
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by mymac on Tuesday August 22, 2023 @04:06PM (#37227861)
It is pretty wild that people can take out credit in your name without the issuer of the credit doing their dd, and then it causes you trouble afterwards. They should be fined massively for every time that this happens.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by rolobio on Tuesday August 22, 2023 @04:41PM (#37228224)
Agreed. It is astounding to me that a private company can accuse me of a crime with no proof that I did it, and then the government will enforce that without question. You would think they would need fingerprints or something to prove that a particular person did something.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by Aerroon on Tuesday August 22, 2023 @05:46PM (#37228953)
How close does such an accusation come to defamation?
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by 1kurac on Tuesday August 22, 2023 @06:33PM (#37229466)
One lawsuit away.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by lr4444lr on Tuesday August 22, 2023 @09:26PM (#37230787)
They're not accusing you of a crime, though. They're pinning debt on you. It's not just a pedantic difference either, because it means it falls under an entirely different body of law for assumption of liability.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by samstave on Tuesday August 22, 2023 @04:14PM (#37227957)
Before I actually had kids was the first .com bust... I was unemployed as were many in bay area and I filed for unemployment or medical (i cant recall now) but I was told that I was ineligible for benefits because I had a bunch of unpaid child support and other debts in Los Angeles... (never lived there, no kids at time, avoid LA all my life)

It took me months to prove that I wasa childless, 20-something dork in bay area...

nightmare - but any "credit" agency is scum

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by Loughla on Tuesday August 22, 2023 @04:49PM (#37228328)
Not to be that guy, but I have one better.

My nephew is now 20. When he was 5 we gifted him some cash in a savings account (to teach him about money stuff). We were immediately served notice that he was overdue on two mortgages. It took three years to get that straightened out (and find out that his ss# was already compromised).

What a mess. What kind of an agency would see the ss#for a literal child and just think, yep, this is fine.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by bell-cot on Tuesday August 22, 2023 @05:22PM (#37228696)
Sounds kinda similar to a former coworker ~2 decades ago. Tried to get a mortgage, rejected, he obtained his credit file...and ~80% of the stuff in "his" credit report was for similar-named people (mostly living in the same part of the U.S.). Report said that he had purchased a house at age 5, based on the well-paid job he got at Ford Motor Co. at age 4, etc., etc.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by jimt1234 on Tuesday August 22, 2023 @05:39PM (#37228882)
It's pretty much impossible to get your free annual credit report these days. It used to be relatively painless, but now you get slammed with ads for credit monitoring or whatever useless products. Or, the website just doesn't work, redirect to a page telling you to send a letter to some rando PO box.

I used to get my free credit report every year, but I stopped, which I'm sure is exactly what these scumbags want.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by smcin on Tuesday August 22, 2023 @08:07PM (#37230233)
Which website (AnnualCreditReport.com? or the three bureaux' own sites? or some other third-party website (which?)) and what do you mean "the website" just doesn't work? Be aware there are tons of unaffiliated copycat websites claiming to be the official one and just want to serve you ads; don't use them.

IME AnnualCreditReport.com was easy-to-use and never sends ads. It sounds like you were tricked into using something else. If you genuinely had an issue with AnnualCreditReport.com (unlikely), please do tell the FTC: https://consumer.ftc.gov/articles/free-credit-reports

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by JoBrad on Tuesday August 22, 2023 @08:08PM (#37230246)
Have you tried this site? https://www.annualcreditreport.com
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by toomuchtodo on Tuesday August 22, 2023 @06:42PM (#37229553)
LexisNexis Risk reported two inaccurate judgements in my risk report, preventing me from getting a mortgage in my name for almost a decade. It was finally settled in a class action, and I received a check for $625. I wish a terrible time to the individuals who were directly involved at LexisNexis, because someone, somewhere decided to just not care about their data hygiene because there was no incentive to.

https://www.lienandjudgmentdisputes.com/lang/en/

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by ToucanLoucan on Tuesday August 22, 2023 @08:05PM (#37230223)
I mean that's really what it comes down to, isn't it? The incentives. Why should any of them care? They make thousands of errors with regularity that cause millions of consumers endless hours of agony trying to get jobs, trying to buy homes, trying to buy cars, but like, we can't not use them. In my entire long life I have never once done business with Equifax, Experian, and TransUnion. Yet each of them have an entire drawer's worth of data on me, all of which is stored incredibly insecurely, is rife with errors, and the only time I really hear from them is when they've once again screwed something up and have dropped it in my lap like a cat showing up with a dead bird: "Heads up, you gotta handle this."

Like, name one thing they actually do right. Literally anything. I challenge anyone who reads this to name a single bad thing that would happen if all these leech companies got Thanos-snapped out of the universe tomorrow.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by lr4444lr on Tuesday August 22, 2023 @09:29PM (#37230801)
Banks would have to find an alternative. And that's a vacuum which could be filled with worse actors. I keep close tabs with all 3 bureaus because that's the reality we live in.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by mooreds on Tuesday August 22, 2023 @11:01PM (#37231375)
> Banks would have to find an alternative.

We might have worse actors or arbitrary decisions or more expensive loans. Or, why not, all three!

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by gottorf on Tuesday August 22, 2023 @08:39PM (#37230476)
That's awful. I assume you didn't remove yourself from the class action, because you didn't have or want to invest the time and resources into suing them yourself? $625 is a laughable amount of money for the amount of bullshit they put you through.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by toomuchtodo on Tuesday August 22, 2023 @09:28PM (#37230798)
Your assumption is correct. Time is non renewable and I instead focus on higher leverage efforts, such as donating my time to Congressional representatives and federal regulators who craft legislation or attempt enforcement actions (respectively). Do things that scale and all that jazz.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by jacurtis on Tuesday August 22, 2023 @07:32PM (#37229955)
> My nephew is now 20. When he was 5...

So that was 15 years ago when these mortgages were taken out in his name? Placing it between 2007 and 2008.

That's basically right at the inflection point when the housing market had gotten out of control and started crashing down. This was caused because anyone could get a mortgage, regardless of whether they could afford it or who they were. The banks were accused of doing zero due diligence. In some cases no income verification, no identity verification, no job verification, etc.. You could take a mortgage out in your dogs name, and also apparently a 5 year old's name too.

I like to think that the system is better now, but that's probably a fantasy.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by bennettnate5 on Tuesday August 22, 2023 @08:54PM (#37230572)
To make this worse, they won't even let you apply a credit freeze online until you're eighteen years old.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by swozey on Tuesday August 22, 2023 @06:25PM (#37229367)
I had this come up when I was buying a house.

I have a very common name and some guy 20-30 years older than me had past due child support. I also have no kids. This was my first house purchase so I was completely ignorant of the process. What blew my mind is that before verifying whether or not that was me, they informed the sellers of it. I forget the process I went through to prove it wasn't me, I probably just showed them the guys age vs mine or something. That was wild though, like, the sellers could've just cancelled the sale right there if they didn't want to sell to a supposedly deadbeat dad. I couldn't believe they informed the sellers.

Buying a house is awful. Telling someone all of my finances and everything else when I already have an approved mortgage. Ugh. I did have a worse experience SELLING that house though, if you can imagine.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by prawn on Tuesday August 22, 2023 @10:08PM (#37231070)
What a miserable process. Worst thing is that these functions will increasingly be black boxes. You'll just get a negative result from the seller or buyer or landlord or bank and have no recourse. And that's especially unfair when we're talking about something as vital as shelter for decent citizens.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by qawwads on Tuesday August 22, 2023 @09:52PM (#37230951)
Let me rephrase it so the meaning of what you just said impregnate my mind: you were denier money because their records showed you badly needed it. Sound to me the credit agencies aren't the only evil.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by emodendroket on Tuesday August 22, 2023 @06:33PM (#37229474)
This is the magic of reconceptualizing fraud as "identity theft" in the first place.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by franga2000 on Tuesday August 22, 2023 @06:50PM (#37229627)
There's a pretty funny sketch about that: https://youtube.com/watch?v=CS9ptA3Ya9E
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by Vicinity9635 on Tuesday August 22, 2023 @07:57PM (#37230156)
It was never more than marketing for "identity theft protection". When you put it like that, it starts to sound an awful lot like paying a protection racket doesn't it?
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by emodendroket on Wednesday August 23, 2023 @01:44AM (#37232263)
That's ancillary; the biggest thing is offloading liability that would sensibly lie with the institution that lent money to a fictitious version of you.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by rr808 on Tuesday August 22, 2023 @08:51PM (#37230551)
Is it actually a problem or are people just worrying about it? I dont see how a bank or court can enforce anything if you didn't do it.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by gzer0 on Tuesday August 22, 2023 @09:07PM (#37230675)
It's a major concern. When someone steals your identity, they can incur debts, commit crimes, and manipulate data under your name. Victims often spend extensive time and energy clearing up the aftermath. While it seems counterintuitive, banks and institutions usually hold you liable until you can definitively prove the activity wasn't yours. Essentially, in the realm of identity theft, it's often 'guilty until proven innocent' rather than the other way around
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by rr808 on Tuesday August 22, 2023 @09:27PM (#37230792)
Sure I can guess that too. I haven't ever seen anyone with problems though. Does it really happen? Given that nearly every SSN and address has leaked you'd think it would be everywhere.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by bvirb on Tuesday August 22, 2023 @09:42PM (#37230878)
I had this experience after the Equifax hack a while ago when something like 100M+ people's info was stolen. Until I froze my credit I was getting phone calls every few days asking if I had _really_ tried to open some line of credit I had never heard of. The people calling me explained that ever since the Equifax hack they had to do a bunch more due diligence because all they were getting was fraud. No lines of credit were successfully opened in my name, and the issue stopped completely once I froze all my credit.

I think the lesson is when bad stuff happens you really don't want to be in the small minority of people who it is happening to. Once it's happening to everyone then the problem actually gets solved.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by ahonhn on Wednesday August 23, 2023 @03:04AM (#37232715)
An example from last month. "Byron Bay breach victim told to pay Adidas, National Basketball Association $US1.2m by US courts" https://www.abc.net.au/news/2023-07-25/byron-bay-data-breach...
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by rr808 on Wednesday August 23, 2023 @06:57AM (#37234079)
In Australia.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by defrost on Wednesday August 23, 2023 @07:07AM (#37234137)
In the Southern District of Florida, United States of America:

    But then she was charged in the United States with offences including trademark infringement, and was told to pay damages of $US1.2 million ($1.8 million).
Her 'bogo-debt' can still be sold for cents on the dollar to local (Australian) collecters who might haress her, future vacations to US STeates and Territories are now ill advised, etc.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by Tao3300 on Tuesday August 22, 2023 @09:13PM (#37230711)
It's more like "you spent it until you can prove you didn't", which might be worse.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by doubleg72 on Tuesday August 22, 2023 @10:30PM (#37231221)
That's odd, I'm in Pennsylvania and have had multiple fraudulent purchases with my accounts over the years. Every single time, the bank put the money back in my account within days and I never heard anything more about it.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by IG_Semmelweiss on Tuesday August 22, 2023 @11:43PM (#37231597)
fraudulent purchases are not identity theft.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by codedokode on Tuesday August 22, 2023 @09:43PM (#37230881)
In the West they give you money in someone's else name without an ID? Must be a paradise.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by caseysoftware on Tuesday August 22, 2023 @10:07PM (#37231060)
It's amazing what you can do without an ID in the States.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by StillBored on Tuesday August 22, 2023 @05:12PM (#37228593)
As a long time freeze user, it seems literally every time I go to unfreeze the process has changed at one of them and it can't be unlocked with the username +password I setup. The last time was because I didn't log in for 3 years, meant that the account was locked without a bunch of additional validation. Sometimes the validation is just knowing the usual historical address/etc info they ask when you initially set it up (which seems insecure itself), or its more involved.

So, give it time, when you least expect it, they will take 60 days to validate something about your account before allowing you to unfreeze it.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by aceazzameen on Tuesday August 22, 2023 @08:15PM (#37230304)
This is my experience as well. Saving a username and password almost feels like it's worthless with these cretins. And then the dark patterns to upsell you on garbage hiding the actual unfreeze/thaw button.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by flotwig on Tuesday August 22, 2023 @10:16PM (#37231115)
TransUnion is broken for me, has been for years. I have to reset my password every single time.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by wolverine876 on Wednesday August 23, 2023 @01:45AM (#37232266)
Complain to the FTC (or the appropriate regulator). They are now very cognizant of dark patterns.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by thesis on Tuesday August 22, 2023 @05:31PM (#37228794)
Many people don’t know this but you also need to set up a freeze at https://nctue.com/consumers/

I had to deal fraudsters getting cell phones and also electricity to their apartment.

Setting a freeze up here solved it.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by windexh8er on Tuesday August 22, 2023 @06:27PM (#37229390)
Thank you for this, I had no idea this was a thing. Out of curiosity how did you find out about this?
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by hoosieree on Tuesday August 22, 2023 @09:03PM (#37230644)
Maybe from here: https://www.equifax.com/business/data-network/nctue/

Seems to be an Equifax product.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by thesis on Tuesday August 22, 2023 @10:11PM (#37231092)
I really don’t remember. But I kept getting people creating different accounts that I wouldnt know about until it went to collections and dinged my credit. Took me a couple years to finally get it locked down. After 5ish police reports and ftc identity theft reports that all these energy/cell phone companies require for you to dispute.

It’s maddening that these companies give out service with wrong variations of my name and no ID but then want me to jump through hours of hoops to get it removed from collections.

Luckily I got it all resolved prior to rates shooting up so I was able to refi at all time low rates or this would have cost me a lot of money.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by kmoser on Tuesday August 22, 2023 @11:02PM (#37231382)
I wonder which is worse: not setting up a freeze and risk being the victim of identity theft, or setting up a freeze by submitting your info and risk having it stolen from NCTUE?
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by 2023throwawayy on Tuesday August 22, 2023 @11:03PM (#37231389)
> Q. Can I opt out of pre-approved offers based on NCTUE data?

> A. Yes. NCTUE provides information to companies that provide consumers with pre-approved offers of credit. If you would like to Opt-Out and exclude NCTUE information about you from being used in lists provided to companies that make pre-approved offers of credit (as provided in the Fair Credit Reporting Act), you may call us toll free at 1-888-327-4376.

> You may also submit your request via mail to NCTUE at the address below. Please include your name, address, Social Security number and date of birth in your request.

... well that is infuriating.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by lr4444lr on Tuesday August 22, 2023 @09:24PM (#37230774)
This should be taught to every high school senior before we let them off into the world.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by arbuge on Tuesday August 22, 2023 @10:08PM (#37231064)
But would freezing your credit in any way help with the problem identified in the article? (sale of your credit header data)

Specifically:

1. Would it prevent any future occurrences?

2. Would it do anything to help with the leaks that have already occurred?

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by isykt on Tuesday August 22, 2023 @10:37PM (#37231259)
Note that Experian runs their own protection racket called “Credit Lock” that is different from a freeze. It costs money. The freeze doesn’t cost money only because congress mandated that it be free. That’s right, these fuckwits are so irresponsible and greedy that congress actually got off their sorry asses and made a tiny piece of legislation that actually protects consumers.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by WirelessGigabit on Wednesday August 23, 2023 @12:59PM (#37238940)
15 character max password at TransUnion... How outdated is their system?

And none of the 3 allow MFA via something else than text/email.