81–90 of 286 posts
Earlier quoted context omitted.
Pro tip: You shouldn't be answering those questions truthfully.
But you have to remember the answers correctly. How do you keep track ?
Earlier quoted context omitted.
Pro tip: You shouldn't be answering those questions truthfully.
But you have to remember the answers correctly. How do you keep track ?
Interesting, in Sweden this kind of data is already public for anyone to view. There is also several sites that provide this information like a search service and it's perfectly legal: http://www.merinfo.se/ http://www.ratsit.se/
Difference being that in Sweden there is a different requiremnet for causing harm (IE; national ID card or passport - or linked bank account) simply having a social security number and address is not enough for identity theft to occur. in other countries they treat SSN's as private, thus they are trusted.
The problem is that the CPR is tied to all sorts of information from you credit card to your patient journal. You only need to get access to one of those things before you have the potential of access to all the other places.
It's that stupidly built.
Earlier quoted context omitted.
What an odd place to put an anti-Trump comment.
Well, Trump was my first thought seeing the headline. He wants to ban Muslims from the US. Turkey is a Muslim country.
Earlier quoted context omitted.
Difference being that in Sweden there is a different requiremnet for causing harm (IE; national ID card or passport - or linked bank account) simply having a social security number and address is not enough for identity theft to occur. in other countries they treat SSN's as private, thus they are trusted.
That's not really true. Often you can order stuff from the internet with only knowing the SSN. You can order on invoice with Klarna for example. Of course, for things that really matter, you need an ID.
This data is being circulated for a while now. This makes me so angry. It is good that you show the infrastructure is bad, but how stupid does one have to be to say "do something about Erdogan" to the people who are facing identity theft directly due to one's actions? Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to…
Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to access confidential information at most banks (though they wouldn't be able to transfer money without authorisation code). Maybe they should learn a lesson from here - information that you do not control should not be used for authentication. Especially the one that is…
I mean, I suppose skipping a domain means one less company that knows your personal information, but doesn't this mean Voxility[1] can lookup the customer for this IP?
[1] koolba's comment: https://news.ycombinator.com/item?id=11420959
Earlier quoted context omitted.
personnummer? Sounds very Scandinavian to me and quick googling doesn't yield anything particularly Turkish about that word?
My guess is German (because of the historical links between Germany and Turkey).
This data is being circulated for a while now. This makes me so angry. It is good that you show the infrastructure is bad, but how stupid does one have to be to say "do something about Erdogan" to the people who are facing identity theft directly due to one's actions? Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to…
> Many companies use date of birth and address for authentication. Who does? I've seen them used as part of the signup process for some services but never as standalone authentication.
Earlier quoted context omitted.
Many companies use date of birth and address for authentication. The only thing that is missing is mother's maiden name, which then would be enough to access confidential information at most banks (though they wouldn't be able to transfer money without authorisation code). Maybe they should learn a lesson from here - information that you do not control should not be used for authentication. Especially the one that is…
Exactly! This is about as secure as having your first dog's name as a password reset hint. I either already know or can simply ask about the birthday, address and mother's maiden name of practically anyone I know.
"Your superhero name is your first pet's name, your mother's maiden name, and the street you grew up on - mine is Muffy Hitler Queen, what's yours?"