Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Myequifax.com Bypasses Credit Freeze Pin

krebsonsecurity.com

Post reply on HN
Print view View original

71–80 of 206 posts

Re: Myequifax.com Bypasses Credit Freeze Pin

#71

Post by sp332 »

asark wrote: post #39
dev1n wrote: post #4

Can we just shut down equifax already?

What we ought to do—to tie into the "let's break up Google" story also being discussed right now—is make collecting and hoarding data about people incredibly risky. A leak of any size should be a "your company is finished" event. Much collection should simply be outlawed or at least placed under strict user control, GDPR-style. It'd make the CRAs, various other financial institutions (credit card companies, banks), a…

There's some value in having a credit reporting system though. You don't want to make it too easy for someone to edit their credit history to make it look like they're more reliable about paying back their debts. (A good system might not look too much like our current system though.)

Re: Myequifax.com Bypasses Credit Freeze Pin

#72

Post by shawnz »

jstarfish wrote: post #67
human wrote: post #42

Earlier quoted context omitted.

We should really work on making personal data transactions illegal. I can’t think of a single company that I would be happy to hear that they sold my data to third-party. These companies provide no additonal benefits. Equifax is the worst. You can call them and ask to buy lists of names, addresses and phone numbers of people matching certain financial criterias. Facebook would look dull in comparison if people knew t…

> Equifax is the worst. You can call them and ask to buy lists of names, addresses and phone numbers of people matching certain financial criterias. Facebook would look dull in comparison if people knew the extent of the Equifax abuse of privacy. Don't be silly. The long arm of Equifax has a finite length. We know where they get their data from and you have to at least pretend to "consent" to provide it to them by in…

Your arguments seem to work both ways, for example: There is no "consent" with Equifax, they start building a dossier a few seconds after you venture into the open market. You at least have to pretend to "consent" to Google by initiating an HTTP transaction with a Google-associated property. And there are many other ways to get the same data (again, like public records)

Re: Myequifax.com Bypasses Credit Freeze Pin

#73

Post by aura_inquiry »

nkrisc wrote: post #61
css wrote: post #3

> the data being asked about in these KBA quizzes is culled from public records Yesterday, when opening a savings account with a major US financial institution, one of the KBA questions asked for my Zodiac sign. The other two were about a mortgage and the year I was born (±1 year). I do not understand why any competent institution would find these secure and it appalls me that is all the information needed to open an…

Zodiac sign? Seriously? I don't know what mine is because that is not a belief system/religion I subscribe to so I had to Google it. Turns out my birthdate must be on the border because different sources have it as a different sign. They might as well ask what color my aura is.

Hello. What color is your aura?

Re: Myequifax.com Bypasses Credit Freeze Pin

#74

Post by tasty_freeze »

nkrisc wrote: post #61
css wrote: post #3

> the data being asked about in these KBA quizzes is culled from public records Yesterday, when opening a savings account with a major US financial institution, one of the KBA questions asked for my Zodiac sign. The other two were about a mortgage and the year I was born (±1 year). I do not understand why any competent institution would find these secure and it appalls me that is all the information needed to open an…

Zodiac sign? Seriously? I don't know what mine is because that is not a belief system/religion I subscribe to so I had to Google it. Turns out my birthdate must be on the border because different sources have it as a different sign. They might as well ask what color my aura is.

Lie about which is your sign. If the bad guy knows your birthday, they will guess the wrong sign.

Re: Myequifax.com Bypasses Credit Freeze Pin

#75

Post by devoply »

nkrisc wrote: post #61
css wrote: post #3

> the data being asked about in these KBA quizzes is culled from public records Yesterday, when opening a savings account with a major US financial institution, one of the KBA questions asked for my Zodiac sign. The other two were about a mortgage and the year I was born (±1 year). I do not understand why any competent institution would find these secure and it appalls me that is all the information needed to open an…

Zodiac sign? Seriously? I don't know what mine is because that is not a belief system/religion I subscribe to so I had to Google it. Turns out my birthdate must be on the border because different sources have it as a different sign. They might as well ask what color my aura is.

Well what is it?

Re: Myequifax.com Bypasses Credit Freeze Pin

#76

Post by [deleted] »

nkrisc wrote: post #61
css wrote: post #3

> the data being asked about in these KBA quizzes is culled from public records Yesterday, when opening a savings account with a major US financial institution, one of the KBA questions asked for my Zodiac sign. The other two were about a mortgage and the year I was born (±1 year). I do not understand why any competent institution would find these secure and it appalls me that is all the information needed to open an…

Zodiac sign? Seriously? I don't know what mine is because that is not a belief system/religion I subscribe to so I had to Google it. Turns out my birthdate must be on the border because different sources have it as a different sign. They might as well ask what color my aura is.

[deleted]

Re: Myequifax.com Bypasses Credit Freeze Pin

#77

Post by thetrumanshow »

tasty_freeze wrote: post #74
nkrisc wrote: post #61

Earlier quoted context omitted.

Zodiac sign? Seriously? I don't know what mine is because that is not a belief system/religion I subscribe to so I had to Google it. Turns out my birthdate must be on the border because different sources have it as a different sign. They might as well ask what color my aura is.

Lie about which is your sign. If the bad guy knows your birthday, they will guess the wrong sign.

And now you have to keep all of your lies straight.

Re: Myequifax.com Bypasses Credit Freeze Pin

#79

Post by inetknght »

shawnz wrote: post #53
human wrote: post #42

Earlier quoted context omitted.

We should really work on making personal data transactions illegal. I can’t think of a single company that I would be happy to hear that they sold my data to third-party. These companies provide no additonal benefits. Equifax is the worst. You can call them and ask to buy lists of names, addresses and phone numbers of people matching certain financial criterias. Facebook would look dull in comparison if people knew t…

> These companies provide no additonal benefits. They provide safety for lenders, which allows those lenders to offer you cheaper prices. Is that worth it? Not sure personally, but I don't think it's fair to say that they are totally without benefit.

Safety for lenders... by allowing fraud to be cheaper than lending to real people?

I'm afraid I don't understand your logic.

Re: Myequifax.com Bypasses Credit Freeze Pin

#80

Post by ShakataGaNai »

css wrote: post #3

> the data being asked about in these KBA quizzes is culled from public records Yesterday, when opening a savings account with a major US financial institution, one of the KBA questions asked for my Zodiac sign. The other two were about a mortgage and the year I was born (±1 year). I do not understand why any competent institution would find these secure and it appalls me that is all the information needed to open an…

Yea. I recently had two run ins with this exact same KBA system. One for a bank and one for a health insurance type thing. Both asked a question of which hospital was closest to me. How is it "KnowledgE" when I had to google map 4 different hospitals to figure out where they even were? One of two variations also listed two 'different' hospitals that were less than 2 blocks apart, leaving the 'closest' question up to a flip of the coin.
Post reply on HN