News for hackers. Stuff that matters.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by mymac on Tuesday August 22, 2023 @04:06PM (#37227861)
It is pretty wild that people can take out credit in your name without the issuer of the credit doing their dd, and then it causes you trouble afterwards. They should be fined massively for every time that this happens.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by rolobio on Tuesday August 22, 2023 @04:41PM (#37228224)
Agreed. It is astounding to me that a private company can accuse me of a crime with no proof that I did it, and then the government will enforce that without question. You would think they would need fingerprints or something to prove that a particular person did something.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by Aerroon on Tuesday August 22, 2023 @05:46PM (#37228953)
How close does such an accusation come to defamation?
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by 1kurac on Tuesday August 22, 2023 @06:33PM (#37229466)
One lawsuit away.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by lr4444lr on Tuesday August 22, 2023 @09:26PM (#37230787)
They're not accusing you of a crime, though. They're pinning debt on you. It's not just a pedantic difference either, because it means it falls under an entirely different body of law for assumption of liability.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by samstave on Tuesday August 22, 2023 @04:14PM (#37227957)
Before I actually had kids was the first .com bust... I was unemployed as were many in bay area and I filed for unemployment or medical (i cant recall now) but I was told that I was ineligible for benefits because I had a bunch of unpaid child support and other debts in Los Angeles... (never lived there, no kids at time, avoid LA all my life)

It took me months to prove that I wasa childless, 20-something dork in bay area...

nightmare - but any "credit" agency is scum

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by Loughla on Tuesday August 22, 2023 @04:49PM (#37228328)
Not to be that guy, but I have one better.

My nephew is now 20. When he was 5 we gifted him some cash in a savings account (to teach him about money stuff). We were immediately served notice that he was overdue on two mortgages. It took three years to get that straightened out (and find out that his ss# was already compromised).

What a mess. What kind of an agency would see the ss#for a literal child and just think, yep, this is fine.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by bell-cot on Tuesday August 22, 2023 @05:22PM (#37228696)
Sounds kinda similar to a former coworker ~2 decades ago. Tried to get a mortgage, rejected, he obtained his credit file...and ~80% of the stuff in "his" credit report was for similar-named people (mostly living in the same part of the U.S.). Report said that he had purchased a house at age 5, based on the well-paid job he got at Ford Motor Co. at age 4, etc., etc.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by jimt1234 on Tuesday August 22, 2023 @05:39PM (#37228882)
It's pretty much impossible to get your free annual credit report these days. It used to be relatively painless, but now you get slammed with ads for credit monitoring or whatever useless products. Or, the website just doesn't work, redirect to a page telling you to send a letter to some rando PO box.

I used to get my free credit report every year, but I stopped, which I'm sure is exactly what these scumbags want.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by smcin on Tuesday August 22, 2023 @08:07PM (#37230233)
Which website (AnnualCreditReport.com? or the three bureaux' own sites? or some other third-party website (which?)) and what do you mean "the website" just doesn't work? Be aware there are tons of unaffiliated copycat websites claiming to be the official one and just want to serve you ads; don't use them.

IME AnnualCreditReport.com was easy-to-use and never sends ads. It sounds like you were tricked into using something else. If you genuinely had an issue with AnnualCreditReport.com (unlikely), please do tell the FTC: https://consumer.ftc.gov/articles/free-credit-reports

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by JoBrad on Tuesday August 22, 2023 @08:08PM (#37230246)
Have you tried this site? https://www.annualcreditreport.com
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by toomuchtodo on Tuesday August 22, 2023 @06:42PM (#37229553)
LexisNexis Risk reported two inaccurate judgements in my risk report, preventing me from getting a mortgage in my name for almost a decade. It was finally settled in a class action, and I received a check for $625. I wish a terrible time to the individuals who were directly involved at LexisNexis, because someone, somewhere decided to just not care about their data hygiene because there was no incentive to.

https://www.lienandjudgmentdisputes.com/lang/en/

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by ToucanLoucan on Tuesday August 22, 2023 @08:05PM (#37230223)
I mean that's really what it comes down to, isn't it? The incentives. Why should any of them care? They make thousands of errors with regularity that cause millions of consumers endless hours of agony trying to get jobs, trying to buy homes, trying to buy cars, but like, we can't not use them. In my entire long life I have never once done business with Equifax, Experian, and TransUnion. Yet each of them have an entire drawer's worth of data on me, all of which is stored incredibly insecurely, is rife with errors, and the only time I really hear from them is when they've once again screwed something up and have dropped it in my lap like a cat showing up with a dead bird: "Heads up, you gotta handle this."

Like, name one thing they actually do right. Literally anything. I challenge anyone who reads this to name a single bad thing that would happen if all these leech companies got Thanos-snapped out of the universe tomorrow.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by lr4444lr on Tuesday August 22, 2023 @09:29PM (#37230801)
Banks would have to find an alternative. And that's a vacuum which could be filled with worse actors. I keep close tabs with all 3 bureaus because that's the reality we live in.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by mooreds on Tuesday August 22, 2023 @11:01PM (#37231375)
> Banks would have to find an alternative.

We might have worse actors or arbitrary decisions or more expensive loans. Or, why not, all three!

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by gottorf on Tuesday August 22, 2023 @08:39PM (#37230476)
That's awful. I assume you didn't remove yourself from the class action, because you didn't have or want to invest the time and resources into suing them yourself? $625 is a laughable amount of money for the amount of bullshit they put you through.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by toomuchtodo on Tuesday August 22, 2023 @09:28PM (#37230798)
Your assumption is correct. Time is non renewable and I instead focus on higher leverage efforts, such as donating my time to Congressional representatives and federal regulators who craft legislation or attempt enforcement actions (respectively). Do things that scale and all that jazz.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by jacurtis on Tuesday August 22, 2023 @07:32PM (#37229955)
> My nephew is now 20. When he was 5...

So that was 15 years ago when these mortgages were taken out in his name? Placing it between 2007 and 2008.

That's basically right at the inflection point when the housing market had gotten out of control and started crashing down. This was caused because anyone could get a mortgage, regardless of whether they could afford it or who they were. The banks were accused of doing zero due diligence. In some cases no income verification, no identity verification, no job verification, etc.. You could take a mortgage out in your dogs name, and also apparently a 5 year old's name too.

I like to think that the system is better now, but that's probably a fantasy.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by bennettnate5 on Tuesday August 22, 2023 @08:54PM (#37230572)
To make this worse, they won't even let you apply a credit freeze online until you're eighteen years old.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by swozey on Tuesday August 22, 2023 @06:25PM (#37229367)
I had this come up when I was buying a house.

I have a very common name and some guy 20-30 years older than me had past due child support. I also have no kids. This was my first house purchase so I was completely ignorant of the process. What blew my mind is that before verifying whether or not that was me, they informed the sellers of it. I forget the process I went through to prove it wasn't me, I probably just showed them the guys age vs mine or something. That was wild though, like, the sellers could've just cancelled the sale right there if they didn't want to sell to a supposedly deadbeat dad. I couldn't believe they informed the sellers.

Buying a house is awful. Telling someone all of my finances and everything else when I already have an approved mortgage. Ugh. I did have a worse experience SELLING that house though, if you can imagine.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by prawn on Tuesday August 22, 2023 @10:08PM (#37231070)
What a miserable process. Worst thing is that these functions will increasingly be black boxes. You'll just get a negative result from the seller or buyer or landlord or bank and have no recourse. And that's especially unfair when we're talking about something as vital as shelter for decent citizens.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by qawwads on Tuesday August 22, 2023 @09:52PM (#37230951)
Let me rephrase it so the meaning of what you just said impregnate my mind: you were denier money because their records showed you badly needed it. Sound to me the credit agencies aren't the only evil.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by emodendroket on Tuesday August 22, 2023 @06:33PM (#37229474)
This is the magic of reconceptualizing fraud as "identity theft" in the first place.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by franga2000 on Tuesday August 22, 2023 @06:50PM (#37229627)
There's a pretty funny sketch about that: https://youtube.com/watch?v=CS9ptA3Ya9E
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by Vicinity9635 on Tuesday August 22, 2023 @07:57PM (#37230156)
It was never more than marketing for "identity theft protection". When you put it like that, it starts to sound an awful lot like paying a protection racket doesn't it?
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by emodendroket on Wednesday August 23, 2023 @01:44AM (#37232263)
That's ancillary; the biggest thing is offloading liability that would sensibly lie with the institution that lent money to a fictitious version of you.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by rr808 on Tuesday August 22, 2023 @08:51PM (#37230551)
Is it actually a problem or are people just worrying about it? I dont see how a bank or court can enforce anything if you didn't do it.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by gzer0 on Tuesday August 22, 2023 @09:07PM (#37230675)
It's a major concern. When someone steals your identity, they can incur debts, commit crimes, and manipulate data under your name. Victims often spend extensive time and energy clearing up the aftermath. While it seems counterintuitive, banks and institutions usually hold you liable until you can definitively prove the activity wasn't yours. Essentially, in the realm of identity theft, it's often 'guilty until proven innocent' rather than the other way around
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by rr808 on Tuesday August 22, 2023 @09:27PM (#37230792)
Sure I can guess that too. I haven't ever seen anyone with problems though. Does it really happen? Given that nearly every SSN and address has leaked you'd think it would be everywhere.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by bvirb on Tuesday August 22, 2023 @09:42PM (#37230878)
I had this experience after the Equifax hack a while ago when something like 100M+ people's info was stolen. Until I froze my credit I was getting phone calls every few days asking if I had _really_ tried to open some line of credit I had never heard of. The people calling me explained that ever since the Equifax hack they had to do a bunch more due diligence because all they were getting was fraud. No lines of credit were successfully opened in my name, and the issue stopped completely once I froze all my credit.

I think the lesson is when bad stuff happens you really don't want to be in the small minority of people who it is happening to. Once it's happening to everyone then the problem actually gets solved.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by ahonhn on Wednesday August 23, 2023 @03:04AM (#37232715)
An example from last month. "Byron Bay breach victim told to pay Adidas, National Basketball Association $US1.2m by US courts" https://www.abc.net.au/news/2023-07-25/byron-bay-data-breach...
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by rr808 on Wednesday August 23, 2023 @06:57AM (#37234079)
In Australia.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by defrost on Wednesday August 23, 2023 @07:07AM (#37234137)
In the Southern District of Florida, United States of America:

    But then she was charged in the United States with offences including trademark infringement, and was told to pay damages of $US1.2 million ($1.8 million).
Her 'bogo-debt' can still be sold for cents on the dollar to local (Australian) collecters who might haress her, future vacations to US STeates and Territories are now ill advised, etc.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by Tao3300 on Tuesday August 22, 2023 @09:13PM (#37230711)
It's more like "you spent it until you can prove you didn't", which might be worse.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by doubleg72 on Tuesday August 22, 2023 @10:30PM (#37231221)
That's odd, I'm in Pennsylvania and have had multiple fraudulent purchases with my accounts over the years. Every single time, the bank put the money back in my account within days and I never heard anything more about it.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by IG_Semmelweiss on Tuesday August 22, 2023 @11:43PM (#37231597)
fraudulent purchases are not identity theft.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by codedokode on Tuesday August 22, 2023 @09:43PM (#37230881)
In the West they give you money in someone's else name without an ID? Must be a paradise.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by caseysoftware on Tuesday August 22, 2023 @10:07PM (#37231060)
It's amazing what you can do without an ID in the States.