Equifax Hack

Lies, damned lies, and statistics.
User avatar
Rob Lister
Posts: 19794
Joined: Sun Jul 18, 2004 7:15 pm
Title: Incipient toppler
Location: Swimming in Lake Ed
Has thanked: 568 times
Been thanked: 578 times

Equifax Hack

Post by Rob Lister » Thu Sep 07, 2017 11:21 pm

(Newser) – The Social Security numbers and birth dates of up to 143 million US consumers were stolen from Equifax in what appears to be one of the largest data breaches in history, Bloomberg reports. According to the Los Angeles Times, Equifax, one of the three major credit reporting firms in the US, discovered the breach July 29 and announced it Thursday. In addition to birth dates and Social Security numbers, hackers had access to names, addresses, and driver's license numbers. Hackers also potentially got their hands on credit card numbers belonging to 209,000 US consumers and dispute documents tied to another 182,000 people. In all, the breach may have affected 44% of all US residents, CNBC reports.
http://www.newser.com/story/248338/soci ... -hack.html

It's pretty clear that a SSN should not be used as a money, medical, or any other economic reference from this point forward. 143 million represents not only 44% of all residents, it represents practically the totality of adults. Your social security number, name, driver's license, etc, are now a matter of public record.

User avatar
Mentat
Posts: 10271
Joined: Tue Nov 13, 2007 11:00 pm
Location: Hangar 18
Has thanked: 37 times
Been thanked: 124 times

Re: Equifax Hack

Post by Mentat » Thu Sep 07, 2017 11:29 pm

A federal cryptographic ID system would fix this. But that ain't going to happen.
It's "pea-can", man.

Lapis Sells . . . But Who's Buying?

User avatar
ed
Posts: 32786
Joined: Tue Jun 08, 2004 11:52 pm
Title: Rhino of the Florida swamp
Has thanked: 431 times
Been thanked: 731 times

Re: Equifax Hack

Post by ed » Fri Sep 08, 2017 12:35 am

Mentat wrote:A federal cryptographic ID system would fix this. But that ain't going to happen.
Yes, because you can trust the feds
- new minimalist ethos -

User avatar
Mentat
Posts: 10271
Joined: Tue Nov 13, 2007 11:00 pm
Location: Hangar 18
Has thanked: 37 times
Been thanked: 124 times

Re: Equifax Hack

Post by Mentat » Fri Sep 08, 2017 1:13 am

ed wrote:
Mentat wrote:A federal cryptographic ID system would fix this. But that ain't going to happen.
Yes, because you can trust the feds
Yes, I do. Because we already have a system where we use SSNs, and there's no argument against using modern authorization and authentication techniques. "You can't trust the federal government" doesn't even make sense as an argument in this context.
It's "pea-can", man.

Lapis Sells . . . But Who's Buying?

User avatar
Abdul Alhazred
Posts: 70284
Joined: Mon Jun 07, 2004 1:33 pm
Title: Yes, that one.
Location: Chicago
Has thanked: 3029 times
Been thanked: 1134 times

Re: Equifax Hack

Post by Abdul Alhazred » Fri Sep 08, 2017 1:23 am

The federal government originally said that the SSN would never be used as a general purpose ID number.

FDR even made a speech to that effect because some people were worried about the possibility.
Image "If I turn in a sicko, will I get a reward?"

"Yes! A BIG REWARD!" ====> Click here to turn in a sicko
Any man writes a mission statement spends a night in the box.
-- our mission statement plappendale

User avatar
sparks
Posts: 13900
Joined: Fri Oct 26, 2007 4:13 pm
Location: Friar McWallclocks Bar -- Where time stands still while you lean over!
Has thanked: 1841 times
Been thanked: 580 times

Re: Equifax Hack

Post by sparks » Fri Sep 08, 2017 3:32 am

Too late. Done. No going back.
You can lead them to knowledge, but you can't make them think.

User avatar
Abdul Alhazred
Posts: 70284
Joined: Mon Jun 07, 2004 1:33 pm
Title: Yes, that one.
Location: Chicago
Has thanked: 3029 times
Been thanked: 1134 times

Re: Equifax Hack

Post by Abdul Alhazred » Fri Sep 08, 2017 4:09 am

Not going back to silly quaint 20th century notions like privacy.

Might as well be nostalgic for phlogiston theory.
Image "If I turn in a sicko, will I get a reward?"

"Yes! A BIG REWARD!" ====> Click here to turn in a sicko
Any man writes a mission statement spends a night in the box.
-- our mission statement plappendale

User avatar
Mentat
Posts: 10271
Joined: Tue Nov 13, 2007 11:00 pm
Location: Hangar 18
Has thanked: 37 times
Been thanked: 124 times

Re: Equifax Hack

Post by Mentat » Fri Sep 08, 2017 4:15 am

The point of cryptographic identification is to make it harder to be tracked, not easier. SSNs is a really bad way to uniquely identify a person.
It's "pea-can", man.

Lapis Sells . . . But Who's Buying?

User avatar
Abdul Alhazred
Posts: 70284
Joined: Mon Jun 07, 2004 1:33 pm
Title: Yes, that one.
Location: Chicago
Has thanked: 3029 times
Been thanked: 1134 times

Re: Equifax Hack

Post by Abdul Alhazred » Fri Sep 08, 2017 4:26 am

Mentat wrote:... harder to be tracked ...
Precisely why it won't happen.
Image "If I turn in a sicko, will I get a reward?"

"Yes! A BIG REWARD!" ====> Click here to turn in a sicko
Any man writes a mission statement spends a night in the box.
-- our mission statement plappendale

User avatar
Anaxagoras
Posts: 21197
Joined: Wed Mar 19, 2008 5:45 am
Location: Yokohama/Tokyo, Japan
Has thanked: 1359 times
Been thanked: 1148 times

Re: Equifax Hack

Post by Anaxagoras » Fri Sep 08, 2017 5:41 am

ed wrote:
Mentat wrote:A federal cryptographic ID system would fix this. But that ain't going to happen.
Yes, because you can trust the feds
What exactly concerns you? Just a vague sense of distrust of the government?

Basically Social Security numbers are obsolete but nevertheless people use them for all sorts of things.

As it stands, it is very easy to have your identity stolen.
A fool thinks himself to be wise, but a wise man knows himself to be a fool.
William Shakespeare

User avatar
Pyrrho
Posts: 25665
Joined: Sat Jun 05, 2004 2:17 am
Title: Man in Black
Location: Division 6
Has thanked: 2678 times
Been thanked: 2723 times

Re: Equifax Hack

Post by Pyrrho » Fri Sep 08, 2017 10:53 am

Equifax has a web site where you can input your last name and the last 6 digits of your SS number to vaguely find out if you're at risk because of this hack. If they store this input, how easy would it be to run a program to figure out the first 3 digits?

Anyway I already subscribe to a monitoring service, thanks to other major hacks in which my info was pwned.
The flash of light you saw in the sky was not a UFO. Swamp gas from a weather balloon was trapped in a thermal pocket and reflected the light from Venus.

User avatar
Anaxagoras
Posts: 21197
Joined: Wed Mar 19, 2008 5:45 am
Location: Yokohama/Tokyo, Japan
Has thanked: 1359 times
Been thanked: 1148 times

Re: Equifax Hack

Post by Anaxagoras » Fri Sep 08, 2017 11:09 am

The first 3 digits are just an area code.

https://www.ssa.gov/history/ssn/geocard.html

If you know where a person was born you can learn the first 3 digits of their SS#.
A fool thinks himself to be wise, but a wise man knows himself to be a fool.
William Shakespeare

User avatar
Skeeve
Posts: 10163
Joined: Wed Jun 09, 2004 7:35 am
Has thanked: 41 times
Been thanked: 76 times

Re: Equifax Hack

Post by Skeeve » Sun Sep 10, 2017 9:12 am

An interesting and related aside...
3 Equifax Executives Sold Stock Days After Hack That Wasn't Disclosed For A Month
Three executives of the credit-reporting agency Equifax sold nearly $2 million worth of company stock within days of a massive data breach potentially affecting 143 million Americans — one that wasn't publicly disclosed until more than a month later.

In a statement, Equifax says the executives
"had no knowledge that an intrusion had occurred at the time they sold their shares."
Sure...
:roll:
Then Skank Of America could start in...

User avatar
Pyrrho
Posts: 25665
Joined: Sat Jun 05, 2004 2:17 am
Title: Man in Black
Location: Division 6
Has thanked: 2678 times
Been thanked: 2723 times

Re: Equifax Hack

Post by Pyrrho » Sun Sep 10, 2017 12:33 pm

http://www.ibtimes.com/political-capita ... es-2587929
If you want to know if you were one of the 143 million people whose data was breached in a hack of Equifax’s data, the company has a website you can use to find out — but there appears to be a catch: To check, you have to agree to give up your legal right to sue the company for damages. The outrage that clause has now generated could complicate the company’s efforts — backed by Republican lawmakers — to block an imminent rule that would ban companies from forcing customers to agree to such provisions.

On Friday, social media users spotlighted fine print on Equifax’s website that appears to force users to agree to waive their class action rights if they use the company’s website to see if their personal data was exposed by the recent hack. It is precisely the kind of arbitration clause that a pending Consumer Financial Protection Bureau (CFPB) rule is designed to outlaw — if Republicans and the Trump administration allow it to go into effect as scheduled later this month.
Lol. To be fair, you have to be a bit naive to put even part of your SS number into a form on Equifax's site. Also, in order to check if you did use their form and are therefore blocked from suing them, they would have to be storing your information.

Nice work if you can get it.
The flash of light you saw in the sky was not a UFO. Swamp gas from a weather balloon was trapped in a thermal pocket and reflected the light from Venus.

User avatar
Abdul Alhazred
Posts: 70284
Joined: Mon Jun 07, 2004 1:33 pm
Title: Yes, that one.
Location: Chicago
Has thanked: 3029 times
Been thanked: 1134 times

Re: Equifax Hack

Post by Abdul Alhazred » Sun Sep 10, 2017 1:21 pm

Skeeve wrote:An interesting and related aside...
3 Equifax Executives Sold Stock Days After Hack That Wasn't Disclosed For A Month
Three executives of the credit-reporting agency Equifax sold nearly $2 million worth of company stock within days of a massive data breach potentially affecting 143 million Americans — one that wasn't publicly disclosed until more than a month later.

In a statement, Equifax says the executives
"had no knowledge that an intrusion had occurred at the time they sold their shares."
Sure...
:roll:
Maybe not a "hack" in the sense of an attack from outside, but rather an insider manipulation of the stock price from the very beginning.
Image "If I turn in a sicko, will I get a reward?"

"Yes! A BIG REWARD!" ====> Click here to turn in a sicko
Any man writes a mission statement spends a night in the box.
-- our mission statement plappendale

User avatar
Skeeve
Posts: 10163
Joined: Wed Jun 09, 2004 7:35 am
Has thanked: 41 times
Been thanked: 76 times

Re: Equifax Hack

Post by Skeeve » Sun Sep 10, 2017 1:39 pm

Abdul Alhazred wrote:
Skeeve wrote:An interesting and related aside...
3 Equifax Executives Sold Stock Days After Hack That Wasn't Disclosed For A Month
Three executives of the credit-reporting agency Equifax sold nearly $2 million worth of company stock within days of a massive data breach ...

In a statement, Equifax says the executives
"had no knowledge that an intrusion had occurred at the time they sold their shares."
Sure...
:roll:
Maybe not a "hack" in the sense of an attack from outside, but rather an insider manipulation of the stock price from the very beginning.
Wow AA!
I thought I was the designated conspiracy person...You're joking right?
Then Skank Of America could start in...

User avatar
Pyrrho
Posts: 25665
Joined: Sat Jun 05, 2004 2:17 am
Title: Man in Black
Location: Division 6
Has thanked: 2678 times
Been thanked: 2723 times

Re: Equifax Hack

Post by Pyrrho » Sun Sep 10, 2017 1:42 pm

It's plausible.
The flash of light you saw in the sky was not a UFO. Swamp gas from a weather balloon was trapped in a thermal pocket and reflected the light from Venus.

User avatar
WildCat
Posts: 13684
Joined: Tue Jun 15, 2004 2:53 am
Location: The 33rd Ward, Chicago
Has thanked: 30 times
Been thanked: 310 times

Re: Equifax Hack

Post by WildCat » Sun Sep 10, 2017 1:46 pm

In related news my debit card was cloned (probably) several months ago. To illustrate how cocky these bastards are, and sure they won't get seriously investigated, the big-ticket item they bought was a $1,680 Cobra health insurance premium payment.

Surely, there's a real name attached to the policy that was purchased? This should be an easy open and shut case right? They won't tell me anything...
Do you have questions about God?

you sniveling little right-wing nutter - jj

User avatar
ed
Posts: 32786
Joined: Tue Jun 08, 2004 11:52 pm
Title: Rhino of the Florida swamp
Has thanked: 431 times
Been thanked: 731 times

Re: Equifax Hack

Post by ed » Sun Sep 10, 2017 2:21 pm

Mentat wrote:
ed wrote:
Mentat wrote:A federal cryptographic ID system would fix this. But that ain't going to happen.
Yes, because you can trust the feds
Yes, I do. Because we already have a system where we use SSNs, and there's no argument against using modern authorization and authentication techniques. "You can't trust the federal government" doesn't even make sense as an argument in this context.
It isn't, actually. Our government cannot be trusted, not even a little bit.

To quote the estimable Ken White:
The United States government lies.

The people who represent the United States government lie.

In fact, the entire framework of secrecy and privilege is founded in lies by the United States. The state secret privilege — the half-century-old doctrine that holds that the government may ignore the rule of law by invocation of claims of secrecy — was premised on a lie by the United States.
https://www.popehat.com/2013/07/08/secrets-and-lies/

To suggest that somehow a system that they cause to come into being might obviate the plain and simple fact that they cannot be trusted is silly, and dangerous.
- new minimalist ethos -

User avatar
Mentat
Posts: 10271
Joined: Tue Nov 13, 2007 11:00 pm
Location: Hangar 18
Has thanked: 37 times
Been thanked: 124 times

Re: Equifax Hack

Post by Mentat » Sun Sep 10, 2017 2:58 pm

What does any of that have to do with replacing social security as an identification service?
It's "pea-can", man.

Lapis Sells . . . But Who's Buying?