Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

FBI Probes Service Selling 153M+ Drivers Licenses

krebsonsecurity.com

Post reply on HN
Print view View original

11–20 of 306 posts

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#11

Post by toast0 »

mulmen wrote: post #10
3eb7988a1663 wrote: post #9

Earlier quoted context omitted.

153 million puts them at roughly 1/2 of all Americans. Naturally these "identity verification" companies are a joke that have no security and gladly piss our PII into the wind without taking the job seriously.

I had two active Clear subscriptions at the same time. How did an identity verification company not know both accounts were the same person? They were both using the same credit card! What does an "identity verification" company even do?

Clear takes your money and zips you through the airport checkpoint line. Because terrorists wouldn't spend money or time to get through the lines faster?

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#13

Post by samlinnfer »

Nition wrote: post #12

The thing that really gets me about this one is that surely you can easily just delete the data after you've verified someone? But instead they decided to keep 153,347,439 of them.

The whole point is they keep it forever. You think any id verification services actually delete the data?

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#14

Post by maccam912 »

Nition wrote: post #12

The thing that really gets me about this one is that surely you can easily just delete the data after you've verified someone? But instead they decided to keep 153,347,439 of them.

It's not clear that this came from a point in time dump, but like it has been getting harvested by someone for awhile. They may be deleting it, but by then a copy is made? Speculation after reading the article but that's what it sounded like to me.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#15

Post by Nition »

samlinnfer wrote: post #13
Nition wrote: post #12

The thing that really gets me about this one is that surely you can easily just delete the data after you've verified someone? But instead they decided to keep 153,347,439 of them.

The whole point is they keep it forever. You think any id verification services actually delete the data?

I mean, just because all your friends are jumping off a cliff...

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#16

Post by Nition »

maccam912 wrote: post #14
Nition wrote: post #12

The thing that really gets me about this one is that surely you can easily just delete the data after you've verified someone? But instead they decided to keep 153,347,439 of them.

It's not clear that this came from a point in time dump, but like it has been getting harvested by someone for awhile. They may be deleting it, but by then a copy is made? Speculation after reading the article but that's what it sounded like to me.

Good point, "we have been continuously exfiltrating new data for over a year into our private database". I missed that line on first read.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#17

Post by kevin_thibedeau »

Nition wrote: post #15
samlinnfer wrote: post #13

Earlier quoted context omitted.

The whole point is they keep it forever. You think any id verification services actually delete the data?

I mean, just because all your friends are jumping off a cliff...

If you and your friends are all sociopaths, you're going to feel left out if you don't join in on the cliff jumping.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#18

Post by samlinnfer »

Nition wrote: post #16
maccam912 wrote: post #14

Earlier quoted context omitted.

It's not clear that this came from a point in time dump, but like it has been getting harvested by someone for awhile. They may be deleting it, but by then a copy is made? Speculation after reading the article but that's what it sounded like to me.

Good point, "we have been continuously exfiltrating new data for over a year into our private database". I missed that line on first read.

It's obvious they are keeping them all. 150 million didn't get all re-scanned at once.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#19

Post by [deleted] »

toast0 wrote: post #11
mulmen wrote: post #10

Earlier quoted context omitted.

I had two active Clear subscriptions at the same time. How did an identity verification company not know both accounts were the same person? They were both using the same credit card! What does an "identity verification" company even do?

Clear takes your money and zips you through the airport checkpoint line. Because terrorists wouldn't spend money or time to get through the lines faster?

[deleted]
Post reply on HN