Live data from Hacker News

FBI Probes Service Selling 153M+ Drivers Licenses

krebsonsecurity.com

281–290 of 313 posts

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#281
post #54

Earlier quoted context omitted.

I'm in Europe and got ~$350 because of three data leaks. The amount per instance was vastly different though - $255, $80 and $15.

What did you do to get the money?

There are law firms that pursue the compensations for you and take a cut of them as payment. I used one of them.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#282
post #197

Earlier quoted context omitted.

The United States doesn't have a central registry of citizens. New births are supposed to be recorded by local officials, in about 3000 different jurisdictions, and they're only recorded locally. Many of those local jurisdictions are operated poorly, and in some cases they have refused to issue certificates of birth based on race, or other personal grudges held by officials. So we simply aren't in the position to iss…

The social security administration does have a central database of essentially everyone born in the US after 1986, when a law was passed that required you to provide the SSN of anyone you claimed as a dependent on your taxes. As a result essentially every child born in the US is issued an SSN along with their birth certificate.

> after 1986

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#283

Earlier quoted context omitted.

This would probably be considered “disenfranchising” because people would have a hard time keeping track of their public key and the process to recover it would involve having to take off work, transportation, etc.

it would likely be built into the ID, like a PIV/CAC card. I thought about this same thing many years ago, the state DMV's could be in a PKI web of trust with a federal signer/issuer/cross-signer above them. Proving your identity online would mean inserting your ID into your computer so it could be crypto-graphically validated. Yes there are genuine privacy and other concerns, but we'll probably end up there anyway a…

> the mess of having these crappy third party for profit companies involved

I think the problem that lots of people, including all the people involved in those companies, don't think that's a problem but a feature. Adds "jobs", GDP, filling their own pockets and a whole host of other "benefits" they're willing to look past any drawbacks in order to get.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#284
post #170

Earlier quoted context omitted.

The whole idea of "voter's fraud" is actually something unheard of in Europe because you will get government issued id (Citizen ID) when you reach 15 y/o and it is renewed every 10 years. You are then using it for voting and in general proving your identity. The later models are biometric so it is very hard to fake it The fact that USA never finished the Real ID thing as the Citizen ID in Europe is kind of mind blowi…

> The whole idea of "voter's fraud" is actually something unheard of in Europe because you will get government issued id (Citizen ID) when you reach 15 y/o and it is renewed every 10 years. You are then using it for voting and in general proving your identity. The later models are biometric so it is very hard to fake it > It is elegant solution to everything what current administration is complaining about - prove of…

The left is more inclined to accept voter ID laws if the ID can be provided to people for no cost (otherwise it's a poll tax) and assistance is provided for any citizens that don't have a complete collection of the necessary documents. A homeless person that doesn't have possession of their social security card and birth certificate has just as much of a right to receive an ID to vote as you or I.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#285

Earlier quoted context omitted.

I've found that the speed of the DMV seems to vary wildly by state, and possibly even city and location, based on anecdotes. Earlier this year, my license was expiring and I decided to get a Real ID. I was able to create an appointment on the Oregon DMV website. It was set for 10 AM. I got there at 9:50 and checked in. My name was called up at only a couple minutes after my appointment time. I gave my documents and p…

It can also depend on where you are within the state. When I lived in Colorado the smart move in Denver was to start lining up about an hour before the DMV opened (for driver licenses, car registration never had much of a line). Out in the mountains, I was able to just walk in just about anytime. The longest wait I had in the small mountain town I lived in was when the one lady working there was doing a driving test,…

When was this? I lived in Denver 2015-2021 and the DMV was always quick when I went.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#286
post #263

Earlier quoted context omitted.

Which is insane. The federal government already knows who we are, via SSN, tax returns, and whatever else. The state already knows via tax returns, driver's license, and whatever else. If we, collectively, don't want a true national ID, then federal regulations on state-issued IDs should be available (something roughly akin to ReadID, but with the ability to use the ID as a proof of age or other attribute as needed).…

> […] ability to use the ID as a proof of age or other attribute as needed What attributes should require proof? Where do you draw the line? Age? Gender? Race? Religion? Political party? Citizenship? > We'll get there eventually, but not before we try everything else first. We got here by trying everything else first. The “good old days” are now . Thousands of years of progress and blood delivered our liberal societi…

Whatever society needs... this is why we have elections and stuff.

Really, the broader point is I'm tired of giving away massive chunks of my PII (SSN, DL copies, etc) instead of just having something from the government that will say "Yep. He is who he claims."

If we, collectively, decide we need age-gated websites, then let's enable that properly. I shouldn't have to give NYT a scan of my DL and my SSN to gain access.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#287

Earlier quoted context omitted.

This is essentially how my Estonian ID card works. The ID card is inserted into a USB smartcard reader and grants access to identity verification an thus access to services.

But the American public is petrified of systems like that because of the leftovers of frontier settler culture and fear of communism. They're apparently far more comfortable with the similar but worse systems being set up by corporations.

Government is wasteful and could never run an efficient [Industry]. Instead, private companies that can be efficient should run [Industry]. They will be more efficient [and turn the surplus into private profits instead of public savings].

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#288

Earlier quoted context omitted.

> which is the butt of every government inefficiency complaint I always find DMV (or whatever your state's equivalent) inefficiency arguments to be hilarious. They're run extremely efficiently for the government . They suck use because of that (long wait times, most important stuff gets shipped by mail weeks later).

I've found that the speed of the DMV seems to vary wildly by state, and possibly even city and location, based on anecdotes. Earlier this year, my license was expiring and I decided to get a Real ID. I was able to create an appointment on the Oregon DMV website. It was set for 10 AM. I got there at 9:50 and checked in. My name was called up at only a couple minutes after my appointment time. I gave my documents and p…

In Oregon the DMV is state run with all the benefits that go with it. the DMV is quiet, calm, smooth, and moves quickly even during lunch hour. When I moved back the DMV had an easy process (that staff helped me complete) to update my info and register everything + get a photo ID. I was in an out over lunch (with lunch still included) and everything was mailed in a week.

In Washington the DMV is split between licensing people and licensing cars/etc (2 locations), plus separate emissions testing locations. It's all contracted out with private companies providing staff and services. Last cycle, it took me over 3 hours to update my ID and registration.

Later, one of these places overcharged me on registration of a new car bought out of state. One near my last apartment in Seattle was running a credit card fraud scheme. Some may not have staff when you need them.

Turns out that when you support and fund the program, the government can do a pretty good job. You can, in fact, pay someone to care.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#289

Earlier quoted context omitted.

It can also depend on where you are within the state. When I lived in Colorado the smart move in Denver was to start lining up about an hour before the DMV opened (for driver licenses, car registration never had much of a line). Out in the mountains, I was able to just walk in just about anytime. The longest wait I had in the small mountain town I lived in was when the one lady working there was doing a driving test,…

When was this? I lived in Denver 2015-2021 and the DMV was always quick when I went.

This was mid-late 2000s. Probably also dependent on which office.

When I got my license they told me that if I had time it would be faster to drive down to the springs than to wait at the Denver office.

Re: FBI Probes Service Selling 153M+ Drivers Licenses

#290
post #263

Earlier quoted context omitted.

> […] ability to use the ID as a proof of age or other attribute as needed What attributes should require proof? Where do you draw the line? Age? Gender? Race? Religion? Political party? Citizenship? > We'll get there eventually, but not before we try everything else first. We got here by trying everything else first. The “good old days” are now . Thousands of years of progress and blood delivered our liberal societi…

Whatever society needs... this is why we have elections and stuff. Really, the broader point is I'm tired of giving away massive chunks of my PII (SSN, DL copies, etc) instead of just having something from the government that will say "Yep. He is who he claims." If we, collectively, decide we need age-gated websites, then let's enable that properly. I shouldn't have to give NYT a scan of my DL and my SSN to gain acce…

> If we, collectively, decide we need age-gated websites

We haven’t decided this.

> having something from the government that will say "Yep. He is who he claims."

You’re literally trading liberty for convenience.

I understand your position. I just fundamentally disagree that the tradeoff you are so eager to make is worthwhile.

Post reply on HN