News for hackers. Stuff that matters.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by zamadatix on Tuesday August 22, 2023 @04:09PM (#37227892)
Having your identity stolen and having your identity permanently removed are not identical actions. If I use a keylogger to grab your passwords and impersonate you in emails, forums, and so on then your identity is stolen, it's in use by someone else instead of you without consent for a period of time. This does not mean your identity has been removed from you permanently. This also does not mean your identity was always in your control just because the sites should have done more verification to see if it was you. It was still stolen but the fraud wasn't caught, and the lost money due to fraud falls between the criminal and 3rd party regardless independent of your identity being fraudulently used. Keep in mind that's how it is today, if your identity is stolen it is already the bank that eats the loss due to fraudulent lending.

If you still disagree please try to make an argument without mentioning banks. Identity theft covers a lot more than banking fraud so the explanation shouldn't explain how you want the term to be changed to something which focuses solely on banks.

The processes in place do suck. That has nothing to do with the name of the crime though.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by s__s on Tuesday August 22, 2023 @04:26PM (#37228096)
Identity can’t be stolen. You can be impersonated. I think the point they’re making is that it’s not the victims fault if someone is impersonating them. I would agree. It makes zero sense for the victim of impersonation to be held accountable in any way for the actions of the criminal.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by zamadatix on Tuesday August 22, 2023 @04:52PM (#37228362)
There is just more than a singular definition of identity in English and one of them can't be stolen while several others can. Impersonation is one way of stealing one of those definitions identity theft refers to. This doesn't mean the definition of identity is simultaneously violated.

The victim of impersonation isn't held accountable for the action of the criminal, particularly with banks. That's precisely what identity theft laws protect. I'm in favor of making that process even easier for the victim wherever possible but changing the name is not that.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by oxygen_crisis on Tuesday August 22, 2023 @04:17PM (#37227982)
> identity, noun, The condition of being a certain person or thing.

Someone who steals my passwords can impersonate me, they can not become me. Someone who tricks people into thinking they are me is still not me. An account is not an identity.

My online accounts are not me, and I am not my online accounts.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by zamadatix on Tuesday August 22, 2023 @04:24PM (#37228061)
There are many dictionary definitions of identity. Take Merriam-Webster:

"1a: the distinguishing character or personality of an individual

2: the condition of being the same with something described or asserted

3a: sameness of essential or generic character in different instances"

Or the Cambridge dictionary:

"a person's name and other facts about who they are:"

Of course, you're always welcome to intentionally pick the incorrect context (going back to Merriam-Webster):

"4: an equation that is satisfied for all values of the symbols"

And just as easily rant the name of the crime has nothing to do with math so it needs to be renamed.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by oxygen_crisis on Tuesday August 22, 2023 @08:33PM (#37230434)
If it's open to interpretation, you're choosing the worst interpretation.

How this is interpreted is the primary problem that needs to be solved in order to legislate the issue, and from the interpretations you're supporting, it seems you're firmly on the side of the parties failing to identify fraudsters correctly, versus the innocent individuals.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by zamadatix on Thursday August 24, 2023 @11:26AM (#37249937)
"Worst interpretation" isn't about matter of preference on which interpretation is moral rather intentionally choosing the least supportive definition as proof the phrase is a misnomer. Ignoring the Cambridge one, which seems to be post phrase, definitions like "sameness of essential or generic character in different instances" are very stealable things, even if another definition is not.

As I've stated I'm in favor of the individuals. When doing so, I like to stick to factual and logical reasons why instead of insist the root of the problem is the chosen definition of "identity" does not match my preferred one. The root of the problem is the current process for dealing with identity theft is more burdensome than it needs to be on individuals. If you change the name it's still too burdensome because, outside of you, everyone already interprets "identity" to mean what it should in this case. That the process is bad is not proof the interpretation of the phrase is bad and needs to be fixed, it's proof the process is bad and needs to be fixed.

Just because someone disagrees with one component of your stance does not mean they automatically agree with all opposing positions that followed from it.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by jfengel on Tuesday August 22, 2023 @04:55PM (#37228399)
If you still disagree please try to make an argument without mentioning banks.

I don't think it's possible to avoid mentioning the banks. They are the ones committing the harm against you.

They are a stand-in for numerous other institutions who abuse you. You can take the name "bank" to mean any organization who is defrauded, and then abuses you to obtain repayment for that fraud.

I think it's important to recognize that this is a two-step process. The middle-man in this procedure is crucial, because they are the ones with a lot of power to use the legal system against you. If they were somebody other than a bank or other significant corporation, you'd be able to say, "No, I'm not the John Smith you gave money to. Go away and find that person." The imbalance makes it necessary to define the argument in terms of banks and similar institutions.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by zamadatix on Tuesday August 22, 2023 @05:07PM (#37228531)
Criminal identity theft is one class of examples. An example scenario from this class is someone passes your identifiers off as theirs while committing a crime. Nobody was defrauded, no money exchanged, but you'll still want to report identity theft.

Claiming identity theft is precisely the process to notify the bank (or others) they cannot legally abuse you to get repayment for that fraud or you are not responsible for those crimes or whatever occured on your behalf. Under identity theft laws they are responsible for the loss due to fraud, not you. The same as credit card companies. The legal system is used but as much by you saying "I didn't buy that house, clear my records and eat the losses" as by the bank initially saying "this person didn't pay their loan". To not involve the legal system by both parties just opens up an even worse can of worms of fraud.

One thing I do agree on is that anything that can reasonably be done to make the process easier on the victim of identity theft should be as the process is too hard on them right now. Probably more fines to most middlemen to increase the cost further beyond their losses. I just don't think changing the name of the crime has anything to do with that kind of improvement.

Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by oxygen_crisis on Tuesday August 22, 2023 @09:12PM (#37230703)
> If I use a keylogger to grab your passwords and impersonate you in emails, forums, and so on then your identity is stolen

This is actually a great example.

If you impersonate me in an e-mail and talk someone into sending a thousand dollars they owed me into some strange account, a reasonable victim isn't going to come to me and say "we're square now, because I paid that fraudster's account what I owed you."

Instead they should admit they made a mistake in assuming it was me based on suspiciously inadequate information and pursue the fraudster if they want their money back.