Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Last four of social is so abused it shouldn't count, and date of birth is in nearly every company's loyalty database. That leaves drivers license and state ID number as the leaked data. I'm honestly not sure how important or secure those are.


Illinois is one of the states where driver's license numbers are computed from all the other information: http://www.highprogrammer.com/alan/numbers/dl_us_shared.html


wow. I had no idea about this, but it correctly calculated my DL number.


> Last four of social is so abused it shouldn't count

Yet it does. Almost every single business/government service in America uses DoB + last 4 SSN to identify you. The two together make fraud trivial.


Exactly. Every leak already has it. Every company already has it. The fact that fraud is trivial is already true, and this leak really adds little to it.


Can I have the last four numbers of your social security number?


-


OK, now would be so kind as to pretend that we've been leaked your birth year and state of birth?

Before you answer, you may want to poke your answers into this site and have a look at the outcome: https://www.ssn-check.org/lookup/

Caveat: This tracks your issue date, not truly your birthdate. In the past couple of decades many/most babies get registered at birth, but if I stick my own (birth) data in there I actually get the wrong answer, because when I was born issuance wasn't automatic yet. But that will work for a lot of people.


They are a requirement if you were wanting to fraudulently open a bank account in someone else's name.


Need a whole SSN for that no?


Both the first three and the middle two have a pretty clear rhyme and reason to them which would likely make getting them right a not-so-difficult task after a bit of homework.

https://www.ssa.gov/history/ssn/geocard.html

Anecdotally, while bored in math class we figured out that 10 or so of the guys in the class had one of two numbers for their first three.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: