Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

T-Mobile: Breach Exposed SSN/DOB of 40M+ People

krebsonsecurity.com

Post reply on HN
Print view View original

101–110 of 282 posts

Re: T-Mobile: Breach Exposed SSN/DOB of 40M+ People

#101

Post by gruez »

dahfizz wrote: post #98
iknowstuff wrote: post #36

The EU has a federated public key cryptography based identity system. The member states recognize identities issued by other member states, but there is no central system. In any case, the private key is stored on a plastic ID, which acts as a smart card and can be hooked up to a smartphone/PC for identity verification and document signing online. The key is only released with a PIN, and the databases online only sto…

Better yet, why does my cell phone provider need all this information about me anyway? Why is there an ID involved at all?

credit checks (for post-paid plans), I believe.

Re: T-Mobile: Breach Exposed SSN/DOB of 40M+ People

#102

Post by Buttons840 »

jvanderbot wrote: post #38
nateberkopec wrote: post #15

With the frequency of these breaches, it feels like we are moving to a post-security world where SSNs and DOBs are simply public information. Would that really be such a bad thing? Both seem completely replaceable as authentication steps.

As always comes up, its not really identity theft, as that information doesnt help you do anything but defraud banks who are not taking time to properly verify who they are lending to. We just call it that so it's not the bank's fault. "Your identity was stolen, we couldn't do anything! " Check a photo ID. Check a public cert. Take a fingerprint.

This. A bank you've never heard of fails to identify someone they're giving money to? Your problem, even though you weren't even one of the parties involved.

Is a credit agency illegally spreading false information about you? Not their problem, after all, they can't be expected to know they're spreading false information. Also, they advertise that they are in possession of credit monitoring systems capable of detecting this false information. How is this not libel?

Re: T-Mobile: Breach Exposed SSN/DOB of 40M+ People

#103

Post by dharmab »

rank0 wrote: post #81
LeifCarrotson wrote: post #73

No, the US has far more religious fundamentalists than the EU. They believe that such a system is tantamount to taking the Mark of the Beast, quoting Revelation 13:16-17: > And he causes all, the small and the great, and the rich and the poor, and the free men and the slaves, to be given a mark on their right hand or on their forehead, and he provides that no one will be able to buy or to sell, except the one who has…

This is just nonsense. Where are you coming up with this theory? Everyone has an ssn already wouldn’t that qualify for the mark?

There were objections to SSNs when they were introduced. A few religious groups have legal exclusions from Social Security.

Re: T-Mobile: Breach Exposed SSN/DOB of 40M+ People

#104

Post by [deleted] »

LeifCarrotson wrote: post #73

No, the US has far more religious fundamentalists than the EU. They believe that such a system is tantamount to taking the Mark of the Beast, quoting Revelation 13:16-17: > And he causes all, the small and the great, and the rich and the poor, and the free men and the slaves, to be given a mark on their right hand or on their forehead, and he provides that no one will be able to buy or to sell, except the one who has…

[deleted]

Re: T-Mobile: Breach Exposed SSN/DOB of 40M+ People

#105

Post by tristor »

rank0 wrote: post #81
LeifCarrotson wrote: post #73

No, the US has far more religious fundamentalists than the EU. They believe that such a system is tantamount to taking the Mark of the Beast, quoting Revelation 13:16-17: > And he causes all, the small and the great, and the rich and the poor, and the free men and the slaves, to be given a mark on their right hand or on their forehead, and he provides that no one will be able to buy or to sell, except the one who has…

This is just nonsense. Where are you coming up with this theory? Everyone has an ssn already wouldn’t that qualify for the mark?

As someone from the Midwest, I can absolutely say that resistance to the RealID Act was entirely based in this sort of flawed religious logic. I heard it from some of my own family members who are politically influential in their community.

Re: T-Mobile: Breach Exposed SSN/DOB of 40M+ People

#106

Post by astura »

swiley wrote: post #91
iknowstuff wrote: post #36

The EU has a federated public key cryptography based identity system. The member states recognize identities issued by other member states, but there is no central system. In any case, the private key is stored on a plastic ID, which acts as a smart card and can be hooked up to a smartphone/PC for identity verification and document signing online. The key is only released with a PIN, and the databases online only sto…

>Can we please have this in the US? Absolutely not. How about not requiring an ID? There are plenty of carriers here that don't do that.

A post paid phone plan in the US is a contract with a rotating line if credit - that is why the ID is required.

If you don't want to show id there's plenty of prepaid options (including with TMobile). You can also pay someone else to put you on their plan - the carrier only has the identification information for the plan owner.

Re: T-Mobile: Breach Exposed SSN/DOB of 40M+ People

#107

Post by merb »

gostsamo wrote: post #86
merb wrote: post #70

Earlier quoted context omitted.

except that eIDAS is basically not in use in germany.

Well, Germany is not the entire EU. I have such card and it comes in handy from time to time, though the implementation could be much better.

I'm pretty sure that in france eIDAS is not there aswell, which would already mean that over 1/3 (probably more, because more states basically don't have it implemented) of the european member states population does not use it (yet)

Re: T-Mobile: Breach Exposed SSN/DOB of 40M+ People

#108

Post by gjsman-1000 »

tristor wrote: post #105
rank0 wrote: post #81

Earlier quoted context omitted.

This is just nonsense. Where are you coming up with this theory? Everyone has an ssn already wouldn’t that qualify for the mark?

As someone from the Midwest, I can absolutely say that resistance to the RealID Act was entirely based in this sort of flawed religious logic. I heard it from some of my own family members who are politically influential in their community.

Part of it too was that the original RealID Act actually did call for a national database of all citizens in the US, but this was later removed. Now it's basically just a list of security requirements before granting the ID that is applicable everywhere.

Re: T-Mobile: Breach Exposed SSN/DOB of 40M+ People

#109

Post by swiley »

LeifCarrotson wrote: post #73

No, the US has far more religious fundamentalists than the EU. They believe that such a system is tantamount to taking the Mark of the Beast, quoting Revelation 13:16-17: > And he causes all, the small and the great, and the rich and the poor, and the free men and the slaves, to be given a mark on their right hand or on their forehead, and he provides that no one will be able to buy or to sell, except the one who has…

I'm against it. Not for religious reasons but because of the potential to concentrate power.
Post reply on HN