- cross-posted to:
- cybersecurity@sh.itjust.works
- cross-posted to:
- cybersecurity@sh.itjust.works
You must log in or register to comment.
Wait until non Americans hear that our national social security ID number is only 4/9 digits worth of “random” numbers. (Fun fact, the entire number was procedurally generated based on where you were born and in what order at the hospital for generations until they changed it recently)
The numbers aren’t random. They are sequential. The early digits are assigned geographically, but the rest are in sequence. If you know a valid social security number, adding or subtracting 1 will be another valid social security number, most likely someone born in the same hospital on the same day.
They did change it somewhat recently, but they don’t re-assign the numbers when making that change, so most of the numbers are completely insecure.
The only way to fix this is to have us upload our IDs online constantly, perhaps to prove we are adults.
It is the only way we can we safe.
Woaha. Why didn’t anyone think of this before you?
At this rate, a new ID type will have to be used. I dont have a clue what, but a new one…
But don’t forget guys, uploading your government IDs to any old fucking website to prove your age is very safe and protects children. There’s no way this could go wrong and everyone in the supply chain is very trustworthy
My elderly father recently fell for a Facebook imposter that pretended to be a family member and asked if their friend could contact him. The friend asked him to take a photo of his driver’s license and text it to them, fortunately he doesn’t know how. I’ve been wondering ever since what can they do if they had it? It doesn’t have his social security number on it. His credit has since been locked and banks notified
I’ve been wondering ever since what can they do if they had it?
Ask for pictures of all his other paperwork so they can finish onboarding him at his new job.
Annnd this is why a refuse to verify with IDs online and use services like Plaid. And the web of T&C’s from multiple 3rd party services like this will mean all of them get shielded from blame.
Did you read the article? They were renting a car. A car rental place isn’t going to let you just not show your ID.
it wasn’t just Hertz. it was the ID verification service they used.
The IRS made me since I used a different service to file my takes this year. It was a pain in the ass. Apparently my existing id.me login wasn’t enough, they wanted a video call or a scan of my face. There was no other option. It was a pain.
they tried that with me. I just told em to fuck off.
if you make it impossible to identify myself through standard means, you don’t get my tax dollars. 🤷 fuck em.
I would have, but they owed me money, so I needed to get my money.
I don’t like it when a store scans my driver’s license to buy alcohol. I stick to small convenience stores without that tech.
Luckily archive.org saved the idscan.net press release announcing their partnership with Planet13 dispensaries. They have since deleted the post on their site. Nothing shady about that. 😂
Most of this seems very serious and concerning, but…
Nexus also claimed to provide scans of marijuana dispensary cards
What could anyone possibly do with that? It costs like $50 to get one in California, not sure about other states.
Legal weed in CA now dawg. No dispensary card needed
Under 21 still requires a medical card
Less taxes in most places if you have a med card. Financially sensible if you buy a certain amount per year.
Huh, I just assumed they got rid of them when legalization happened. TIL
