News for hackers. Stuff that matters.

A comment on Anna's Archive: An Update from the Team. Parent comment

Re:Anna's Archive: An Update from the Team by ethbr1 on Monday August 18, 2025 @03:15PM (#44944198)
The idea that any widely transmitted identifiers' confidentiality should be its primary method of security is asinine.

The failure of any exploit regarding SSNs or the like is not on the offending party, but on each using party's failure to implement even a modicum of actual security.

[ Parent | on HN ]
Re:Anna's Archive: An Update from the Team by travoc on Monday August 18, 2025 @03:26PM (#44944313)
FYI calling something "asinine" is not an argument.
[ Parent | on HN ]
Re:Anna's Archive: An Update from the Team by ndriscoll on Monday August 18, 2025 @06:56PM (#44946195)
A widely transmitted identifier that tons of organizations need to ask you for taxes is not secret. It's used to precisely identify who you claim to be. It's your username. There's not much to say about also treating it as your password except that it's asinine. It's like treating your first name/last name as a secret password.
[ Parent | on HN ]