cross-posted from: https://lemmy.world/post/13810367
This was probably orchestrated on purpose as part of a long term operation
The goal would be to make things like this happen over and over and over again so as to eventually get people outraged enough so that they can push for everyone to get on board with CBDCs, forced nerulink implants, digital identity like the EU, and basically anything that helps the government make you a total slave to surveillance and tracking
It’s another one of those, “it’s for your safety!!!” deals
Or maybe they just need to practice better security. Never assume malice when something can be explained with inconfidence.
To be fair the threat actors are getting much harder to defend against
People must learn to open their eyes. We already know that the government, big tech, and corporations lie all the time. Yet somehow, when I suggest that they are lying, I get told off?? Give me a break.
I am not assuming, more or less just strongly suggesting. There is a major benefit to the larger agenda here.
Anyway I’m not frustrated at you, just majority of so-called privacy people who can’t see a bigger picture. Same kind of people that would have torn you to shreds for suggesting some things pre-2014 that Snowden later revealed to be true. Somehow we forgotten about him.
The SSA should just set a time limit, (let’s say 3 years,) and then publish a database of every single name, DOB, and SSN. Force the banks to figure out a new system of identification, by making the current system useless.
The current system is already insecure; SSNs were never intended to be secure. So why has the SSA tolerated this for so long? Just make the “in three years we’ll publish this live database for anyone to search” announcement, so banks are forced to develop a better system. It gives them the time to work on a new system, eliminates the need to keep SSNs secret, and the SSA can keep operating as normal.
Mine is 075-21-9556 in case anyone wants it.
Glad that you guys think that you’re so bold but why don’t you post this in hacker forums instead?
I keep reading “social security number”, but still don’t understand why it’s possible to steal a person’s identity with their SSN. Is that all that’s required for identification? Some number?
It’s a key component. You need other information, but the SSN is supposed to be secret.
State-assigned unchangeable passwords that you hand out to 20-100 companies throughout your life (every job, every loan, every credit card, every financial account, every background check, every…)
This was 70 million people in 1 breach.
Keep in mind there are only 340 million people in the US, many of which are under 18.
We need a better system.
https://en.m.wikipedia.org/wiki/Office_of_Personnel_Management_data_breach
The Office of Personnel Management data breach was a 2015 data breach targeting Standard Form 86 (SF-86) U.S. government security clearance records retained by the United States Office of Personnel Management (OPM). One of the largest breaches of government data in U.S. history, the attack was carried out by an advanced persistent threat based in China, widely believed to be the Jiangsu State Security Department, a subsidiary of the Government of China’s Ministry of State Security spy agency.
In June 2015, OPM announced that it had been the target of a data breach targeting personnel records.[1] Approximately 22.1 million records were affected, including records related to government employees, other people who had undergone background checks, and their friends and family.[2][3] One of the largest breaches of government data in U.S. history,[1] information that was obtained and exfiltrated in the breach[4] included personally identifiable information such as Social Security numbers,[5] as well as names, dates and places of birth, and addresses.[6] State-sponsored hackers working on behalf of the Chinese government carried out the attack.[4][7]
The data breach consisted of two separate, but linked, attacks.[8] It is unclear when the first attack occurred but the second attack happened on May 7, 2014, when attackers posed as an employee of KeyPoint Government Solutions, a subcontracting company. The first attack was discovered March 20, 2014, but the second attack was not discovered until April 15, 2015.[8] In the aftermath of the event, Katherine Archuleta, the director of OPM, and the CIO, Donna Seymour, resigned.[9]
Getting names, emails, addresses, etc is pretty available. If you can link those up + an SSN you can open accounts pretty easily
Damn… that seems like a pretty bad system. Have there not been attempts to remedy that?
It’s almost like the gov should replace the SSN system with something that addresses modern security concerns.
There is, just on a state level which does nothing for a nation with 50 of the fuckers
Social Security Numbers were never meant to be used for anything other than Social Security itself. Credit agencies use the SSN because they view it as an easy identifier and they didn’t have to create anything themselves.
It’s ridiculous how something that is supposed to be very confidential and kept private is asked everywhere you need services.
It was never supposed to be confidential. That need arose as a direct result of using it as an ID. If the SSA was the only organization using the number, (as originally intended,) then it wouldn’t need to be kept confidential.
But when the SSA gave every single person a unique number, other organizations went “hmm this sure would be convenient for differentiating individuals with similar names and DOBs.” So other organizations started using it for identification, and suddenly you needed to keep the number secret because anyone with your number could ID themselves as you.
The SSA needs to publish a public database of every single name, DOB, and SSN. Force organizations to figure out a new system of identification, instead of relying on an insecure and outdated system.
