The FBI is reportedly investigating a massive data breach that is unfolding in real time.
  • Horsey@lemmy.worldEnglish
    4·
    4 hours ago

    Wait until non Americans hear that our national social security ID number is only 4/9 digits worth of “random” numbers. (Fun fact, the entire number was procedurally generated based on where you were born and in what order at the hospital for generations until they changed it recently)

    • Hildegard (she/her)@lemmy.blahaj.zoneEnglish
      3·
      29 minutes ago

      The numbers aren’t random. They are sequential. The early digits are assigned geographically, but the rest are in sequence. If you know a valid social security number, adding or subtracting 1 will be another valid social security number, most likely someone born in the same hospital on the same day.

      They did change it somewhat recently, but they don’t re-assign the numbers when making that change, so most of the numbers are completely insecure.

  • nanometer1625@thelemmy.clubEnglish
    5·
    6 hours ago

    This is yet another reason why virtual ID cards are superior: In the event that the card data is compromised, the old virtual ID can be revoked and a new virtual ID can be issued. Virtual ID cards can also have a much shorter duration, because the cost of rotating it is minimal. For example, California’s virtual driver licenses rotate each 30 days.

  • sunbytes@lemmy.worldEnglish
    24·
    9 hours ago

    The only way to fix this is to have us upload our IDs online constantly, perhaps to prove we are adults.

    It is the only way we can we safe.

  • Darkard@lemmy.worldEnglish
    358·
    1 day ago

    But don’t forget guys, uploading your government IDs to any old fucking website to prove your age is very safe and protects children. There’s no way this could go wrong and everyone in the supply chain is very trustworthy

  • Hikermick@lemmy.worldEnglish
    33·
    1 day ago

    My elderly father recently fell for a Facebook imposter that pretended to be a family member and asked if their friend could contact him. The friend asked him to take a photo of his driver’s license and text it to them, fortunately he doesn’t know how. I’ve been wondering ever since what can they do if they had it? It doesn’t have his social security number on it. His credit has since been locked and banks notified

    • historicaldocuments@lemmy.worldEnglish
      15·
      18 hours ago

      I’ve been wondering ever since what can they do if they had it?

      Ask for pictures of all his other paperwork so they can finish onboarding him at his new job.

  • Yaky@slrpnk.netEnglish
    87·
    1 day ago

    Also it doesn’t help that, for example, at U-Haul, employees just use their personal phone to scan a QR code and take pictures of your ID.

  • Bell@lemmy.worldEnglish
    382·
    1 day ago

    Annnd this is why a refuse to verify with IDs online and use services like Plaid. And the web of T&C’s from multiple 3rd party services like this will mean all of them get shielded from blame.

    • 7101334@lemmy.worldEnglish
      27·
      1 day ago

      Did you read the article? They were renting a car. A car rental place isn’t going to let you just not show your ID.

      • ikidd@lemmy.dbzer0.comEnglish
        19·
        1 day ago

        So how they did it once upon a time was you showed them your license, they punched the # into the system that would check it. The person at the desk would confirm it was you from the picture. No need to scan the actual ID card, which is where this problem comes from.

    • Raiderkev@lemmy.worldEnglish
      1·
      23 hours ago

      The IRS made me since I used a different service to file my takes this year. It was a pain in the ass. Apparently my existing id.me login wasn’t enough, they wanted a video call or a scan of my face. There was no other option. It was a pain.

      • GreenKnight23@lemmy.worldEnglish
        3·
        17 hours ago

        they tried that with me. I just told em to fuck off.

        if you make it impossible to identify myself through standard means, you don’t get my tax dollars. 🤷 fuck em.

  • dan1101@lemmy.worldEnglish
    67·
    1 day ago

    I don’t like it when a store scans my driver’s license to buy alcohol. I stick to small convenience stores without that tech.

    • boonhet@sopuli.xyzEnglish
      10·
      1 day ago

      Had a fun time visiting the US, clerk didn’t understand why she couldn’t scan my ID and find it in the database. All that for trying to buy some cigarettes as I was a smoker at the time and didn’t bring much with me (stupid mistake, they’re way more expensive in the US)

  • Newhere@lemmy.mlEnglish
    1·
    14 hours ago

    I don’t understand what is the point to upload all these IDs to dark web. Everything is traceable! Every transaction ect. If it would not be traceable many would just get another ID for identification on web or similar- like Sim card, because government is tracking everything, so they could track "Indiana Jones " and not me. Later just get another Sim with other iD. So, that data is available, I don’t think it’s possible to buy it without being connected to it.

    • Zitronenlolli@thelemmy.clubEnglish
      2·
      6 hours ago

      In addition to scanning and verification, VeriScan performs ID parsing to collect, separate, and classify information from the various fields on IDs. This allows Planet 13 to seamlessly harvest the names and demographic/geographic information of its guests. This data is providing insights into customer profiles, which is especially valuable as Planet 13 expands its footprint into other states, including supplementing its SuperStores with smaller, neighborhood retail shops.

      I have no words.

  • 7101334@lemmy.worldEnglish
    5·
    1 day ago

    Most of this seems very serious and concerning, but…

    Nexus also claimed to provide scans of marijuana dispensary cards

    What could anyone possibly do with that? It costs like $50 to get one in California, not sure about other states.