Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

FBI Probes Service Selling 153M+ Drivers Licenses

krebsonsecurity.com

Post reply on HN
Print view View original

241–250 of 313 posts

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#241

Post by megagpt5 »

DANmode wrote: post #236
megagpt5 wrote: post #80

Earlier quoted context omitted.

Negligence isn't a crime in itself. It is an explanation or cause for other crimes. And there is nothing illegal in the US about selling pictures of people's drivers licenses.

> Negligence isn't a crime in itself. It is an explanation or cause for other crimes. Correct, like being criminally negligent of a child, if you leak data through long-known vectors (for argument’s sake), one could argue you are criminally negligent in securing the private data. It doesn’t really go that way, often, now. It could, as more e.g. water treatment and energy providing facilities get pwnd.

Except the US has no law that you have to secure private data or that not securing it is a crime.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#242

Post by [deleted] »

Sohcahtoa82 wrote: post #234
packetlost wrote: post #196

Earlier quoted context omitted.

> which is the butt of every government inefficiency complaint I always find DMV (or whatever your state's equivalent) inefficiency arguments to be hilarious. They're run extremely efficiently for the government . They suck use because of that (long wait times, most important stuff gets shipped by mail weeks later).

I've found that the speed of the DMV seems to vary wildly by state, and possibly even city and location, based on anecdotes. Earlier this year, my license was expiring and I decided to get a Real ID. I was able to create an appointment on the Oregon DMV website. It was set for 10 AM. I got there at 9:50 and checked in. My name was called up at only a couple minutes after my appointment time. I gave my documents and p…

[deleted]

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#243

Post by mulmen »

packetlost wrote: post #196
thephyber wrote: post #186

Earlier quoted context omitted.

Ah yes, a facetious jab at legitimate criticisms of Voter ID laws. It's worth pointing out that the point of contact for state IDs is the DMV, which is the butt of every government inefficiency complaint. If, instead, it was done at USPS offices or even by postal workers on their routes, no one would complain. It's entirely about whether the burden is placed on the citizen to maintain their Constitutionally guarantee…

> which is the butt of every government inefficiency complaint I always find DMV (or whatever your state's equivalent) inefficiency arguments to be hilarious. They're run extremely efficiently for the government . They suck use because of that (long wait times, most important stuff gets shipped by mail weeks later).

> They're run extremely efficiently for the government. They suck use because of that (long wait times, most important stuff gets shipped by mail weeks later).

The government is efficient without qualification.

People just like to complain and Reagan was charismatic so we’re cursed with this government inefficiency meme. We’re programmed to repeat it even when providing counter examples.

The overwhelming majority of the waiting I do in life is at the hands of private organizations who are unwilling to invest in proper staffing.

There will no doubt be replies to the contrary but to them I say they have identified corruption, not inefficiency. When the government doesn’t work it is by choice.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#244

Post by mulmen »

bigbuppo wrote: post #231
packetlost wrote: post #196

Earlier quoted context omitted.

> which is the butt of every government inefficiency complaint I always find DMV (or whatever your state's equivalent) inefficiency arguments to be hilarious. They're run extremely efficiently for the government . They suck use because of that (long wait times, most important stuff gets shipped by mail weeks later).

I live in Misissippi. The last time I had to go in-person for a license renewal I was in and out in less than 10 minutes because they had automated kiosks. Then again, Mississippi is a progressive state.

Given the voter suppression history I’m curious if that experience is consistent across location and racial dimensions.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#245

Post by CrazyMusicians »

Tangurena2 wrote: post #157
ericmay wrote: post #137

Earlier quoted context omitted.

Ideally it’s not even stored…

In the Heartland data breach, the custom malware that hackers wrote copied the mag stripe as it passed through the payment system. I got a new credit card after that broke (also after Target's breach was reported). Heartland did not store the card details at all. How it was discovered was some dumb luck when an auditor asked what seems like a dumb question. When you type dir or ls at a command prompt, it says somethi…

That's a pretty decent list of breaches. Never seen it before. Thanks for sharing. I can't believe they didn't mention the Ashley Madison breach, which affected more than 30 million people, ended countless marriages, and led to more than a few suicides.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#246

Post by k33n »

ericmay wrote: post #219
k33n wrote: post #215

Earlier quoted context omitted.

This is a fine debate tactic — dumping a load of text without the proper context. But I’m not debating here. I’m plainly stating the fact that US states are not sovereign entities. In practical terms, there is no such thing as a semi-sovereign entity.

Folks have provided great information. It's up to you to decide to accept the facts or continue to double down on your private worldview, but it won't serve you well to be ignorant of the facts here.

You and that other guy made good points from a constitutional law standpoint, don’t misunderstand my disagreement for dismissal of any kind.

A legal term of art is often a bit different than the basic word itself. From a legal term of art perspective, I’m essentially referencing “absolute sovereignty”, which would more closely mirror the actual dictionary definition of sovereignty, as a basic, contextless word.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#247

Post by iamnothere »

embedding-shape wrote: post #212
iamnothere wrote: post #167

Earlier quoted context omitted.

Once the official ID exists, those backchannels will be cut off, as they have been in much of Europe.

> Once the official ID exists, those backchannels will be cut off, Do you seriously not get it yet? You have IDs now, and you claim those backchannels exists now, and haven't been cut off. Why would calling something something else suddenly make those backchannels be cut off? How come they exists today in the first place then?

Official IDs don’t exist now. The “surrogate” IDs (SSN, DLs) are not universal nor mandatory, and there are legal barriers to using them as an official national ID.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#248

Post by CamperBob2 »

embedding-shape wrote: post #213
r3trohack3r wrote: post #198

Earlier quoted context omitted.

I know it’s not new, thus why I said I’ve never seen a definition that is both true and useful. In the U.S. I can lawfully use violence in many ways under many circumstances. I.E. if you’re in my house and I didn’t invite you there, I can slay you lawfully. In the U.S. the federal government is not the only institution responsible for law making or law enforcement. It is not only entity that can lawfully use violence…

> In the U.S. I can lawfully use violence in many ways under many circumstances. I.E. if you’re in my house and I didn’t invite you there, I can slay you lawfully. Yes, and you can do so, because the government and state says it's OK to do so. If they didn't, it wouldn't. This is the core idea. > In the U.S. the federal government is not the only institution responsible for law making or law enforcement. It is not on…

All those entities are "allowed to use violence" because your government says it's OK.

I don't know if you're in the US, but that's simply not how our Constitution works. "Monopoly on violence" is just something some people made up. It's meaningless, just some empty words on paper.

(Which is also true for the Constitution itself, of course. But if you're talking about the theoretical and philosophical basis for lawmaking in the US, that's what determines both. Theoretically.)

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#249

Post by sidewndr46 »

thephyber wrote: post #186
swingboy wrote: post #166

Earlier quoted context omitted.

This would probably be considered “disenfranchising” because people would have a hard time keeping track of their public key and the process to recover it would involve having to take off work, transportation, etc.

Ah yes, a facetious jab at legitimate criticisms of Voter ID laws. It's worth pointing out that the point of contact for state IDs is the DMV, which is the butt of every government inefficiency complaint. If, instead, it was done at USPS offices or even by postal workers on their routes, no one would complain. It's entirely about whether the burden is placed on the citizen to maintain their Constitutionally guarantee…

This has to be a joke right? The USPS is the group that cut down my mailbox, then left it a blank slab for 6 months. After replacing it, I had an employee state that under no circumstance would they be able to provide me a key to my mailbox.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#250

Post by duxup »

I’ve had more than one client tell me they want to collect drivers license images for various reasons.

Somewhere in the inane executive brain world there are some folks who seem to see some unspecified value in collecting driver’s license images. They never have given me a sensible justification. They seemed to think it provided some assurance that the providing it is in fact who they really are and they can validate…. something.

I’ve managed to push back on that and told them I didn’t want the legal responsibility of managing such data and tracking all the legal responsibilities for any number of countries and ect.

It doesn’t surprise me that there is a ready made service to bypass this kind of absurd requirement.

Post reply on HN