Myequifax.com Bypasses Credit Freeze Pin

#1

Post by deanmoriarty » Fri, Mar 08, 2019, 4:56 PM UTC

Myequifax.com Bypasses Credit Freeze Pin
krebsonsecurity.com

Re: Myequifax.com Bypasses Credit Freeze Pin

#2

Post by deanmoriarty » Fri, Mar 08, 2019, 4:57 PM UTC

I've literally noticed this myself last month when I went to temporarily lift my freeze to apply for a new credit card. I never got asked for the PIN, which I diligently save and securely store. I remember I was explicitly asked for it just a year ago (last time I had to do the same to open another card). I felt like an idiot.

Re: Myequifax.com Bypasses Credit Freeze Pin

#3

Post by css » Fri, Mar 08, 2019, 5:21 PM UTC

> the data being asked about in these KBA quizzes is culled from public records

Yesterday, when opening a savings account with a major US financial institution, one of the KBA questions asked for my Zodiac sign. The other two were about a mortgage and the year I was born (±1 year). I do not understand why any competent institution would find these secure and it appalls me that is all the information needed to open an account in my name.

Edit: Here is the screenshot https://i.imgur.com/Mr8gOOA.jpg

Re: Myequifax.com Bypasses Credit Freeze Pin

#4

Post by dev1n » Fri, Mar 08, 2019, 5:25 PM UTC

Can we just shut down equifax already?

Re: Myequifax.com Bypasses Credit Freeze Pin

#5

Post by ktjfi » Fri, Mar 08, 2019, 5:29 PM UTC

dev1n wrote: post #4

Can we just shut down equifax already?

This is not reddit.

Re: Myequifax.com Bypasses Credit Freeze Pin

#6

Post by [deleted] » Fri, Mar 08, 2019, 5:29 PM UTC

[deleted]

Re: Myequifax.com Bypasses Credit Freeze Pin

#7

Post by mumphster » Fri, Mar 08, 2019, 5:30 PM UTC

ktjfi wrote: post #5

dev1n wrote: post #4

Can we just shut down equifax already?

This is not reddit.

Ok and...? Seems like a valid line of conversation to me.

Re: Myequifax.com Bypasses Credit Freeze Pin

#8

Post by shawnz » Fri, Mar 08, 2019, 5:31 PM UTC

mumphster wrote: post #7

ktjfi wrote: post #5

Earlier quoted context omitted.

This is not reddit.

Ok and...? Seems like a valid line of conversation to me.

Except it doesn't address the problem at all. What happens when another negligent credit bureau pops up to replace it?

Re: Myequifax.com Bypasses Credit Freeze Pin

#9

Post by hsk0823 » Fri, Mar 08, 2019, 5:32 PM UTC

css wrote: post #3

> the data being asked about in these KBA quizzes is culled from public records Yesterday, when opening a savings account with a major US financial institution, one of the KBA questions asked for my Zodiac sign. The other two were about a mortgage and the year I was born (±1 year). I do not understand why any competent institution would find these secure and it appalls me that is all the information needed to open an…

No one thinks this is actually secure, it's security theater.

The thing is, the cost of identity theft of consumers to credit reporting companies is less than the cost to actually adopt secure methods to judge one's credit.

Re: Myequifax.com Bypasses Credit Freeze Pin

#10

Post by mumphster » Fri, Mar 08, 2019, 5:32 PM UTC

shawnz wrote: post #8

mumphster wrote: post #7

Earlier quoted context omitted.

Ok and...? Seems like a valid line of conversation to me.

Except it doesn't address the problem at all. What happens when another negligent credit bureau pops up to replace it?

Exactly the line of conversation I'd love to see :)