News for hackers. Stuff that matters.

A comment on 900 social insurance numbers stolen from Revenue Canada via Heartbleed. Parent comment

Re:900 social insurance numbers stolen from Revenue Canada v... by SpikedCola on Monday April 14, 2014 @12:28PM (#7587103)
In terms of being used for authentication, CRA and other online services usually require SIN + DOB + Postal Code, and then they mail you a 4-digit PIN to the address they have on file.

Hilariously enough, if you call them, you can change the address on file if you have SIN + DOB, making the "PIN" pointless (and irritating, since you have to wait several weeks)

[ Parent | on HN ]
Re:900 social insurance numbers stolen from Revenue Canada v... by serge2k on Monday April 14, 2014 @03:26PM (#7588240)
They have updated now to work with some of the banks.

Still a pain to get it setup, but once you are setup it is much better now.

[ Parent | on HN ]