Live data from Hacker News

Equihax

krypt3ia.wordpress.com

61–70 of 209 posts

Re: Equihax

#61
post #57

https://trustedidpremier.com/eligibility/enroll.html ^ you can see if you or any of the above mentioned people have been compromised using this tool.

Yeah, at best, that tool from Equifax is unreliable. People have put in fake users and SSN and still it's told them they were affected. At worst, it's just another way to get customers to sign up for a new service.

I put in the SSN of my family and it states we were affected, I put in fake names and SSN and it says we were probably not affected.

Re: Equihax

#62

This really pisses me off. It's only a matter of time before some random person opens up a cellphone, utlity, or bank account... or worse. Completely messed up. Everyone American should be scared shitless at this incompetence. It's going to cost everyone thousands of dollars over their lives for credit fraud protection. Just another expense to add.

> It's going to cost everyone thousands of dollars over their lives for credit fraud protection. In my mind, the Just thing to do would be for Equifax to offer ongoing fraud protection to all of their customers affected by this leak. (Gosh, that might be expensive!)

I mean sure, if they can't make fraud-avoidance part of their fundamental business model.

Re: Equihax

#63

Cool, this is good news as it means I might actually be able to find out my credit score. I recently sent in an application to Equifax to get my credit score along with all the security documents, proof of address, passport, drivers license, registered mail etc. and they rejected my application because I didn't provide a hydro bill. Unfortunately, I live in an apartment and I don't pay hydro, so I sent in a copy of t…

If its only the score you want, cant you get that from creditkarma for free?

Re: Equihax

#64

Earlier quoted context omitted.

Goes to show how silly credit scores are

They are insidious, not silly. The reason is that they mean little for those with tons of money - but they mean everything for the average person with limited money. They literally keep the poor poor.

The concept of credit scores has a reason to exist, it's just our implementation is broke a million times over. There's nothing wrong with a business loaning you money having the knowledge aforehand that you don't pay your obligations on time.

Re: Equihax

#65
post #37

EDIT: see philipodonnell's reply to this post for an alternative explanation. I may have jumped the gun. As far as I know credit scores are not part of credit reports as they do not show up when you request your credit report. If they were storing "credit score" as part of your credit report but withholding that information when you request a copy that would seem to violate the Fair Credit Reporting Act. It wouldn't…

This doesn't look like a database dump.

Re: Equihax

#66
post #42

I actually kinda hope all the data is made public, as that would (at least hopefully) force people to stop treating knowledge of someone's SSN as valid proof of identity, and lead to a better situation overall.

I really hope that's the outcome here. I also think this should pave the way for real legal consequences for moronic data security. Individuals are banned from using computers when prosecuted, what about "no internet for companies who've proven they can't use it responsibly"

Re: Equihax

#68
post #55
post #53

Earlier quoted context omitted.

"Who would store date of birth as a string?" Enterprise. "If we are stringifying dob why is address still seperated?" Enterprise. "Why are the credit report reasource Ids in the thousands not 1M +?" Enterprise. "Why is the file size null but the file is listed with it's mimeType?" Enterprise. Be grateful you are in a position to be horrified. I'm currently fighting my way through a system that is not currently "Enter…

Exactly. The data model, and particular data typing, being terrible is more indicative of it being legit. Not less.

Anyone who has to work with the clowns in the credit reporting biz knows that this data is probably sitting on some COBOL-backed shimmed-out VAX talking to drum memory storage.

Re: Equihax

#69
post #59

Instructions for private buy dosn't make sense. Transaction id is public, so anyone can write them and claim a transaction is theirs.

Presumably first person to email gets the private address to buy, so if you're slow you'll have wasted 0.2BTC

Re: Equihax

#70
post #24

Earlier quoted context omitted.

Not saying it would be great in the short term, but I wonder how it would play out if the entire database was made widely available. It seems like it would be a lot harder to enforce a debt if the borrower was originally identified based on "secrets" that were well known to be public at the time. Maybe then they would come up with a better authentication scheme than "what color was your first car?"

It would be an awful lot like the end of Fight Club. Destroy credit records, or reduce them to meaningless, either way the economy would collapse. People can complain all they want about credit, but the reality is that it exists as a financial service because loaning things with interest is probably older than agriculture in human society. We've just gotten very good at risk assessment, and this going public would ru…

Credit and existing credit records would still be easily available.

The only change would be that you need to present photo ID in person to open new credit lines... which doesn't seem that unreasonable really.

Post reply on HN