The Equifax Hack Didn't Have to Be This Bad

Post by itodd » Fri, Sep 08, 2017, 7:22 PM UTC

ReidZB wrote: post #20

tbrock wrote: post #15

I'm very worried about this. I've done a lot to try and build my credit and protect my identity by restricting the information I give out. Now I can do nothing to protect it now besides hope someone doesn't target me. Anyone have ideas on how to ensure an identity is not stolen?

You can use a credit freeze: https://www.consumer.ftc.gov/articles/0497-credit-freeze-faq... > Also known as a security freeze, this tool lets you restrict access to your credit report, which in turn makes it more difficult for identity thieves to open new accounts in your name. That’s because most creditors need to see your credit report before they approve a new account. If they can’t see your file, they may not ex…

Post by [deleted] » Fri, Sep 08, 2017, 7:26 PM UTC

dboreham wrote: post #4

mfoy_ wrote: post #3

Earlier quoted context omitted.

It is, and is related to some of the discussion in the main Equifax hack threads. The idea is that this information shouldn't be so sensitive because it isn't really secret in the first place. It also cannot be changed, so it doesn't really meet any reasonable criteria for authenticating information. To quote the relevant top-level comment I had in mind: >mikeash 2 hours ago [-] >If we're lucky, this will be the best…

Also note that other countries don't have this insanity.

Post by jstarfish » Fri, Sep 08, 2017, 7:29 PM UTC

gbarc888 wrote: post #16

dboreham wrote: post #4

Earlier quoted context omitted.

Also note that other countries don't have this insanity.

Which countries do you mean? How do they manage their credit scores?

Post by [deleted] » Fri, Sep 08, 2017, 7:33 PM UTC

unpwn wrote: post #27

avid-infovore wrote: post #21

The Republic of Estonia uses such a system to identify members of its e-Residency program, even with no physical presence. Each e-resident has a public numerical key that serves as a unique identifier, and a corresponding private key that is never revealed. So an example to emulate then! Except: Estonia suffered an embarrassing blow to its much-vaunted ID cards that underpin everything from electronic voting to onlin…

Is there a link to this that's not behind a paywall. Very interested in understanding the flaws of such a system, as a 2 key system seems like the most viable and secure way to establish identity.

Post by vageli » Fri, Sep 08, 2017, 7:41 PM UTC

uobytx wrote: post #12

snomad wrote: post #9

The hack isn't just SSNs - it includes address history, date of birth, drivers license number - everything reasonably necessary to establish identity. Not sure why the focus is SSNs, any solution needs to be even higher. This is about companies stockpiling our personal information and us having little say in the matter.

The reason the focus is on the SSN is because it enables credit. Privacy is important, but so is protecting your finances.