Live data from Hacker News

Equifax Breach Fallout: Your Salary History

krebsonsecurity.com

11–20 of 140 posts

Re: Equifax Breach Fallout: Your Salary History

#12
post #8

It seems in China people use their cellphone to pay everything these days, credit/debit card are becoming old-fashion and meaningless there. Hope one day we can do it here. For mortgage and car loans you do not need credit card either. So we can just give up credit card totally. We do need a new way to build people's credit scores somehow though.

Aren't their cell phones just linked to credit cards?

No. Credit cards are fairly uncommon in China. Most people link an ATM card and load a balance into their WeChat account.

Re: Equifax Breach Fallout: Your Salary History

#15
post #4

Anyone have any idea if Experian and Transunion have something similar?

There's a similar service called Inverify, and they have a page that looks like it might have similar issues: https://inverify.net/ManageIncomeKey.aspx

No idea if they used something smarter than birth date for "Login Code"

Re: Equifax Breach Fallout: Your Salary History

#16
> Sadly, this isn’t anywhere near true because most employers who contribute data to The Work Number — including Fortune 100 firms, government agencies and universities — rely on horribly weak authentication for access to the information.

Sounds like the employers were doing it wrong.

Re: Equifax Breach Fallout: Your Salary History

#18

I hope all the hacked data gets open-sourced. Maybe then we'll have some serious reform. This is ridiculous. What is it going to take to get Congress to actually do something? In the meantime, my strategy is to keep my credit score bad.

Considering the $7.2 million contract the IRS just awarded Equifax in a no contest bid, I think we're definitely getting close!

/s

Re: Equifax Breach Fallout: Your Salary History

#19
I didn't know this existed at all. I thought they just made phone calls to your previous employer and asked. Are we allowed to see what's in it? I mean normally, not just when there's a data breach (and it looks like they shut it all down right now).

Because when you get asked this on an interview, what's the "right" answer? There's base pay, bonuses, 401k match, all kinds of stuff. So the "right" answer is up in the cloud somewhere, I can't see it, but I'm being turned down for jobs when my answer doesn't match the mystery number?

Re: Equifax Breach Fallout: Your Salary History

#20
It's offensive that I have to go jump through hoops, set security questions and a secret pin just so I can secure my own salary information.

Is it too much to dream that Equifax should be legally obligated to provide, at the bare minimum, a way to easily secure this sensitive information?

If I were a hiring manager or in HR this would be a goldmine for verifying candidates' salaries and work histories, and gaining the advantage in any salary negotiation.

Post reply on HN