201–206 of 206 posts
Serious question: what’s to stop a startup or 2 or 3 from creating an alternative credit check system that’s not as horrendous as the current one, thus displacing the current overlords?
Earlier quoted context omitted.
> Indeed I do, it is logistically absurd. I'm talking about replacing one piece of cardboard with a different, more secure, piece of cardboard that resolves actual problems we have today. You're talking about smartphones, tokens, calling in, and a million other complex workarounds all in the name of hypothetical security. And you're talking about zero improvement in security stance. You could literally implement your…
> And you're talking about zero improvement in security stance. Rotatable consumer keys. Mitigating the danger of vendor hacks/leaks. Both at the main problems with SSNs today. > You could literally implement your idea by just making it illegal to store SSNs, because that's the only salient point where you've improved over current state. SSNs cannot be rotated. SSNs have already leaked. Stealing an SSN allows you to…
This statement seems to be about the only thing we agree on. You keep shifting your goalposts or simply repeating "but rotation!" when I've already addressed exactly that.
Earlier quoted context omitted.
Some KBA questions don't show up on your credit report, that being said, they can still be guessed with some certainty if you know the person. Some examples either me or my husband have gotten: -What month was [person] born? [person] was my mom and one option was "I don't know [person]." Luckily they didn't ask the date, because I don't know that, but I do know the month. -Which of the following people are/were you a…
I once had a nightmare set of one where I was setting things up over the phone and had to do KBAs, and asked me who held my Auto Loan. A. Who has my loan has changed since I got it originally. B. The options they gave were (Names changed) Wachovia, Ally Bank, Ally Bank Inc, Ally Bank of New York, where the original lender was Wachovia, and I know it got sold to Ally at some point. I literally have no way to know whic…
> the data being asked about in these KBA quizzes is culled from public records Yesterday, when opening a savings account with a major US financial institution, one of the KBA questions asked for my Zodiac sign. The other two were about a mortgage and the year I was born (±1 year). I do not understand why any competent institution would find these secure and it appalls me that is all the information needed to open an…
That looks like Ally Bank. --BUT, it isn't, per the reply below. It's Discover, though Ally asked me the same zodiac question in what looked like the same font.-- They won't open a joint savings account for my wife and I because my wife doesn't have a phone bill in her own name "for verification." (We've been on the same Southwestern Bell/Cingular/AT&T, recently T-Mobile, family plan for the past, oh, fifteen years,…
It says it does here: https://www.dol.wa.gov/driverslicense/moving.html
Earlier quoted context omitted.
Whenever they limit the number of characters to something small, it makes me wonder if they are storing the password in their database rather than some hash of the password. I complained about this to my old bank (Wells Fargo) and they told me not to worry about it because I'm protected from fraud.
It generally means they're not handling it in a secure way. Worst case scenario is that if the checks you see client side aren't also server side someone might be able to inject things that run as... whatever the server side processes are. Usually anyplace that has a limit less than 512 characters (often 1024, but some string buffers are small) or on the characters you can use, at all, isn't doing it right.
I don't for a second believe that's why my.equifax.com is doing it. It's certainly not why there's a 20 character limit. (I personally use 64 char passwords wherever such long ones are allowed.)
Equifax has the unique ability to collect the most private information available, even when they have never or will never interact with that person. I think the entire credit system needs to be changed. If credit bureau's can't be responsible then citizens should get a choice in the matter. These companies have us by the balls and we have no recourse. It's a monopoly complete with price fixing and everything, except…