21–30 of 76 posts
T-Mobile uses the last4 of the account holder's SSN as a phone support authentication string. This is a trove.
And they're certainly not the only one. Last 4 of SSN is a very common authentication question.
We have to get away from this idea of having "secret" numbers that, if simply discovered, can cause so much damage.
That includes credit card numbers, SSN, etc.
Isn't this considered public data anyways? Illinois (and I believe every other US state) requires that certain voter data be publicly accessible. To access it in bulk, you'll have to pay a small fee, but anyone can get this. A misconfigured AWS instance is always an issue. I'm not trying to downplay that. Only that this data being released to the public isn't anything new - the public already had access to it. https:…
Earlier quoted context omitted.
So the question becomes - what types of data is available using legal channels?
According to Forbes [0]: - Name - Street address - Party affiliation - Elections in which you did (or did not) vote - Phone number - Email address [0] https://www.forbes.com/sites/metabrown/2015/12/28/voter-data...
So, what, now somehow a group of people impacted by this potential identity theft vector will need to rally together under some keen prosecutor to personally sue? Why aren't the vendors auto-summoned to court by the government when these breaches occur? Hooray for the free market .. ?
The free market says they don't care. I've had my identity stolen from a data breach. Could I have sued? Yes. Could I have led a class action lawsuit? Yes.
Did I? No. Why? I'm fine now and just like billions of other humans, I'm lazy and simply just don't care enough.
Source blog post (and free of CNN's obnoxious autoplay video): https://www.upguard.com/breaches/cloud-leak-chicago-voters As soon as I read the headline, I immediately thought "AWS misconfiguration". A few recent massive government-data breaches (by contractors) have fallen into that category: June 2017: http://gizmodo.com/gop-data-firm-accidentally-leaks-personal... May 2017: http://gizmodo.com/top-defense-contracto…
Source blog post (and free of CNN's obnoxious autoplay video): https://www.upguard.com/breaches/cloud-leak-chicago-voters As soon as I read the headline, I immediately thought "AWS misconfiguration". A few recent massive government-data breaches (by contractors) have fallen into that category: June 2017: http://gizmodo.com/gop-data-firm-accidentally-leaks-personal... May 2017: http://gizmodo.com/top-defense-contracto…
Earlier quoted context omitted.
According to Forbes [0]: - Name - Street address - Party affiliation - Elections in which you did (or did not) vote - Phone number - Email address [0] https://www.forbes.com/sites/metabrown/2015/12/28/voter-data...
Last four of social is so abused it shouldn't count, and date of birth is in nearly every company's loyalty database. That leaves drivers license and state ID number as the leaked data. I'm honestly not sure how important or secure those are.
Cool, now let's match them up against death records and see how many of the dead really do vote in Chicago ;)
Earlier quoted context omitted.
According to Forbes [0]: - Name - Street address - Party affiliation - Elections in which you did (or did not) vote - Phone number - Email address [0] https://www.forbes.com/sites/metabrown/2015/12/28/voter-data...
Last four of social is so abused it shouldn't count, and date of birth is in nearly every company's loyalty database. That leaves drivers license and state ID number as the leaked data. I'm honestly not sure how important or secure those are.
Yet it does. Almost every single business/government service in America uses DoB + last 4 SSN to identify you. The two together make fraud trivial.
Earlier quoted context omitted.
I'm pretty sure this is a reference to the "vote early and vote often" phrase that is typically correlated with Chicago, and especially with the Democratic machine politics. Source: Chicagoan. And I found this hilarious.
Alternate take: "It's not a big deal, most of them are dead."
Someone else in this thread made a similar joke and has an all too literal response. I'm starting to think our irreverent sense of humor for our city's politics doesn't translate well.