Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

It's still easy for anyone to become you at Experian

krebsonsecurity.com

Post reply on HN
Print view View original

101–110 of 347 posts

Re: It's still easy for anyone to become you at Experian

#101

Post by earthboundkid »

ajmurmann wrote: post #97
nyokodo wrote: post #7

Earlier quoted context omitted.

> what is the point of using it? Plausible deniability allowing them to push as much significant risk of identity theft onto consumers instead of themselves where it should be.

Even the term "identity theft" needs to go. My identity wasn't stolen! I'm still the same person. The bank got tricked by a scammers and somehow the bank tries to make that my fault. Edit: Imagine this the other way around! Grandma gets scammed by someone pretending to be her bank. So the bank's identity got stolen. So now the real bank needs to fix it, provide more proof of identity to all customers and jump through…

Yes! I’ve been saying this for years. The whole framing is a victim blaming dodge, when the two bad actors are the crooks and whoever made the loan with insufficient ID.

Re: It's still easy for anyone to become you at Experian

#102

Post by DenisM »

FireBeyond wrote: post #71
csharpminor wrote: post #52

I’ve received two data breach notices in the past week, one from my healthcare provider and the other from the bank that holds my mortgage. In both instances they said to lock my credit, and provide free credit monitoring for a year. I find this egregiously insufficient to the point where I think we need more regulation in this space. They should provide lifelong credit monitoring and full insurance on any financial…

> We need DMVs to begin issuing IDs that are physical with digital capabilities The problem is that there is a very vocal segment that views such things as "government overreach" through to the literal mark of the devil. And then there are the challenges of issuing them. There are states (the same states, typically, who shut down voting locations in working class areas and defund their DMVs) who will fight tooth and…

OTOH some other states should be able to do it. They just need to agree on a standard and then motivate creditors to make use of this standard.

Re: It's still easy for anyone to become you at Experian

#103

Post by fedorareis »

happytiger wrote: post #83

How is Experian not sued out of existence for their total failure to protect their customers? I just don’t understand what law allows organizations that compromise large portions of entire societies to continue.

One of the best ways to affect this is to make complaints to the CFPB. They are the regulatory body that is responsible for making sure the credit bureaus aren’t harming consumers

Re: It's still easy for anyone to become you at Experian

#104

Post by pkulak »

vinni2 wrote: post #36
bee_rider wrote: post #6

Of course, we aren’t the customers for these spying companies. But it is surprising that the total lack of security isn’t a deal-breaker for their actual customers. I mean if you can basically impersonate anybody using this service, what is the point of using it?

> what is the point of using it? can you opt out? is there even a choice at all? where i live I can’t opt out of Experian or other credit rating services.

Just buy a bunch of stuff and don’t pay for it. It’ll be the same result, but you’ll have more things.

Re: It's still easy for anyone to become you at Experian

#105

Post by fragmede »

FireBeyond wrote: post #71
csharpminor wrote: post #52

I’ve received two data breach notices in the past week, one from my healthcare provider and the other from the bank that holds my mortgage. In both instances they said to lock my credit, and provide free credit monitoring for a year. I find this egregiously insufficient to the point where I think we need more regulation in this space. They should provide lifelong credit monitoring and full insurance on any financial…

> We need DMVs to begin issuing IDs that are physical with digital capabilities The problem is that there is a very vocal segment that views such things as "government overreach" through to the literal mark of the devil. And then there are the challenges of issuing them. There are states (the same states, typically, who shut down voting locations in working class areas and defund their DMVs) who will fight tooth and…

Real ID is whole 'nother can'o'worms

Re: It's still easy for anyone to become you at Experian

#106

Post by InCityDreams »

alexfoo wrote: post #88

I’m guessing this will continue to happen until, I dunno, some the execs at Experian continually have their accounts compromised in the same way again and again.

The execs may be incompetent, they're probably not stupid, though- they don't use that shit.

Re: It's still easy for anyone to become you at Experian

#107

Post by usea »

alistairSH wrote: post #12
bee_rider wrote: post #11

Earlier quoted context omitted.

There’s no such thing as identity theft, it is impossible to steal an identity, the person still has their identity. It is impersonation. The victim is the entity that has fallen for the impersonation (likely a bank, etc), the perpetrator is the one who did the impersonation, and the impersonated person is just some uninvolved third party. I know it is pedantic but it is important to keep in mind because dumping the…

100% agree, except the impersonated person is impacted when their credit score eventually gets screwed and they can no longer get loans themselves. So, in that regard, they are also a victim.

The impersonated person is impacted because the credit agency is lying about them to other people.

Re: It's still easy for anyone to become you at Experian

#108

Post by DoctorOW »

ajmurmann wrote: post #97
nyokodo wrote: post #7

Earlier quoted context omitted.

> what is the point of using it? Plausible deniability allowing them to push as much significant risk of identity theft onto consumers instead of themselves where it should be.

Even the term "identity theft" needs to go. My identity wasn't stolen! I'm still the same person. The bank got tricked by a scammers and somehow the bank tries to make that my fault. Edit: Imagine this the other way around! Grandma gets scammed by someone pretending to be her bank. So the bank's identity got stolen. So now the real bank needs to fix it, provide more proof of identity to all customers and jump through…

It always reminds me of this classic Mitchell and Webb sketch about the subject.

https://www.youtube.com/watch?v=CS9ptA3Ya9E

Re: It's still easy for anyone to become you at Experian

#110

Post by dudul »

nathants wrote: post #89

i froze my credit across all providers a few years back. only experian failed with silly bugs. tried again just now and it worked. progress!

Did the same, but it looks like this security issue would allow someone to just unfreeze before taking a loan in your name.
Post reply on HN