Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

U.S. Secret Service Warns ID Thieves Are Abusing USPS’s Mail Scanning Service

krebsonsecurity.com

Post reply on HN
Print view View original

131–135 of 135 posts

Re: U.S. Secret Service Warns ID Thieves Are Abusing USPS’s Mail Scanning Service

#131

Post by meowface »

LeftTurnSignal wrote: post #20
TazeTSchnitzel wrote: post #3

So I began reading and figured, huh, thieves must just stealing be the validation letter USPS would send, and thought, hey, that system which is used in many other places for similar things would be quite vulnerable to that attack, right? But then I got to this bit: > KrebsOnSecurity took the USPS to task last year in part for not using its own unique communications method — the U.S. Mail — to validate and notify res…

I use this service, and when I signed up there was nothing to verify I was who I was. I just put in my address, created an account, and within a day or so could get scans of mail sent to my e-mail. This is pretty great too. I moved about two months ago, and switched addresses in Informed Delivery. I got a letter saying I switched, but I never put their code into Informed Delivery, and I still get scans of my mail at…

Same exact situation here. Moved, got mailed a code to verify my address change, was lazy and never entered the code into Informed Delivery, still get Informed Delivery email notifications for scans of mail sent to my new address, and I am able to view the scans.

Re: U.S. Secret Service Warns ID Thieves Are Abusing USPS’s Mail Scanning Service

#132

Post by freedomben »

danso wrote: post #92
Someone1234 wrote: post #54

Earlier quoted context omitted.

People love repeating this for some reason, but mail crime is under-funded, rarely investigated, and even more rarely enforced. Realistically if you tamper with mail nothing at all will happen to you, until your fraud raises to a headline figure and could get someone a promotion.

People love stating this fact because it's likely most people are surprised the law allows for such severe serious penalties for what might seem like a petty infraction. What you've said about underfunded enforcement and rare investigations could be said about almost every other type of non-violent crime.

The DEA and other drug-related enforcement certainly isn't underfunded ...

Re: U.S. Secret Service Warns ID Thieves Are Abusing USPS’s Mail Scanning Service

#133

Post by dalyons »

ghaff wrote: post #109
ams6110 wrote: post #87

Earlier quoted context omitted.

Last time I got social security cards, they were printed on cardstock with absolutely no security features. They would be trivial to counterfeit, if you had the number to begin with. It's amazing that they are accepted as a form of ID to get e.g. a passport.

They may be one form of ID required. (And I'm not sure that's even the case.) They are certainly not sufficient. You need proof of citizenship. You need some form of government-issued ID. I haven't personally had a social security card in many decades. For the first time in I don't know how long, I do need to provide some form of proof of SSN to get a RealID drivers license renewal but last year's W2 is sufficient fo…

not in CA? the dmv lady told me i had to have my physical SSN card (which incidentally wasnt listed as a requirement on their website :| )

Re: U.S. Secret Service Warns ID Thieves Are Abusing USPS’s Mail Scanning Service

#134

Post by TazeTSchnitzel »

eigenvector wrote: post #111
SamBam wrote: post #21

Earlier quoted context omitted.

That system would also allow us to completely get rid of our horrendous voter registration system, and make universal voting a reality.

Lots of countries use the tax system to automatically sign up voters. Obviously this doesn't catch all potential voters - the people who don't file taxes because they have no income are likely a lot of the most disenfranchised individuals - but it gets you 90% of the way there. In Canada, whenever you file your taxes you have a box to tick 'automatically share my information with federal and provincial elections auth…

While it's administered by the Swedish Tax Agency, what Sweden has is actually a general population registration system that everyone* has to be in and which is used across the entire government.

*Asylum seekers and various types of temporary residents and such are not technically considered to be in the population register, though they are usually still in fact in the database, just with less information and a flag saying they don't count

Re: U.S. Secret Service Warns ID Thieves Are Abusing USPS’s Mail Scanning Service

#135

Post by conscion »

beckler wrote: post #56
TazeTSchnitzel wrote: post #3

So I began reading and figured, huh, thieves must just stealing be the validation letter USPS would send, and thought, hey, that system which is used in many other places for similar things would be quite vulnerable to that attack, right? But then I got to this bit: > KrebsOnSecurity took the USPS to task last year in part for not using its own unique communications method — the U.S. Mail — to validate and notify res…

We had Informed Delivery at our old house, and now we have it at our new house... except we don't know how to stop receiving emails from the old house, so we know what the homeowner of our old house gets every day.

There's a link at the bottom of every email to unsubscribe
Post reply on HN