DahGangalang @ DahGangalang @infosec.pub

Posts

1

Comments

398

Joined

2 yr. ago

had to join to it

I don't think I get what this means. As you describe it, that reference id sounds comparable to a pointer, and so there should be a quick look up when you need to de-reference it, but that hardly seems like a "dependency knot"?

I feel like this is showing my own ignorance on the back end if databasing. Can you point me to references that explain this better?

Yeah, obviously ol' boy is tripping if he thinks SQL isn't used in the government.

Big thing I'm prying at is whether there would be a legitimate purpose to have duplicated SSNs in the database (thus showing the First Bro doesn't understand how SQL works).

Yeah, obviously ol' boy is tripping if he thinks SQL isn't used in the government.

Big thing I'm prying at is whether there would be a legitimate purpose to have duplicated SSNs in the database (thus showing the First Bro doesn't understand how SQL works).

Yeah, obviously ol' boy is tripping if he thinks SQL isn't used in the government.

Big thing I'm prying at is whether there would be a legitimate purpose to have duplicated SSNs in the database (thus showing the First Bro doesn't understand how SQL works).

Right. Fingers crossed we figure out national IDs before then.

In responding to other comments, I've found similar things.

All the same, thanks for the resources!

Was trying to find something from the SSA itself on the topic, but didn't turn anything useful up on the quick.

Here is a link for the lazy on the topic: https://www.nbcnews.com/technolog/odds-someone-else-has-your-ssn-one-7-6C10406347

Said this elsewhere, but wanted to be sure you had the chance to see the linked material. The Social Security FAQ page (Q 20, specifically) says that they do not do re-use of old SSNs when people die.

I don't want to come off as a bot spamming this in a bunch of different comment threads, but The Social Security FAQ page (Q 20, specifically) says that they do not do re-use of old SSNs when people die.

The Social Security FAQ page (Q 20, specifically) says that they do not do re-use of old SSNs when people die.

Naw, I definitely meant to be asking about duplication of data in databases (vs if the government actually uses SQL).

Sorry to have communicated that so poorly. Everyone seems to be taking the angle you're arguing though. Guess I'll need to work on that.

Ugh, YES, I am so frustrated at the counter arguments for this that I constantly hear spouted by my (ultra-conservative) family.

I hope that notion re-enters the public consciousness as a part of this (not holding my breath tho)

Hmmm, well I can't speak to how the actual databases are put together, so maybe they would have that as two separate unique primary keys with a duplicated SSN.

But it really seems like bad design if they out it together that way....

Yeah, obviously ol' boy is tripping if he thinks SQL isn't used in the government.

Big thing I'm prying at is whether there would be a legitimate purpose to have duplicated SSNs in the database (thus showing the First Bro doesn't understand how SQL works).

Yeah, obviously ol' boy is tripping if he thinks SQL isn't used in the government.

Big thing I'm prying at is whether there would be a legitimate purpose to have duplicated SSNs in the database (thus showing the Vice Bro doesn't understand how SQL works).

I'm not aware of any instance where two people share an SSN though. The Social Security Administration even goes as far as to say they don't recycle the SSNs of dead people (its linked a couple times in other comments and Voyager doesn't let me save drafts of comments, I'll make an edit to this comment with that link for you).

Can you point me to somewhere showing multiple people can share an SSN?

Edit: as promised: The Social Security FAQ page

Yeah, I can imagine thats be an administrative headache. I do not envy them the opportunity of sorting that out.

Thanks for the example though. That makes sense.

I'm not familiar with cases where someone's SSN could change. Could you link to resources on when that would happen?

I think I was getting some wires crossed and/or misunderstood what geoff (parent commentor to my last comment) was saying, so my comment may be misdirected some.

But according to The Social Security FAQ page, SSNs are not recycled, so that data (especially when compounded and hashed with other data) should be able to establish a one-to-one relationship between each primary key and an SSN, thusly having SSNs appear associated with multiple primary keys is a concern.

Other comments have pointed to other explanations for why SSNs could appear to occur multiple times, but those amount to "it appeared in a different field associated with the same primary key". I think thats the most likely explanation of things.

Yeah, no one appreciates security.

I probably overused that saying to explain it: 'if theres no break ins, why do we pay for security? Oh, there was a break in - what do we even pay security for?'

Yeah, databases are complicated and make my head hurt. Glancing through resources from other comments, I'm realizing I know next to nothing about database optimization. Like, my gut reaction to your comment is that it seems like unnecessary overhead to have that data across two tables - but if one sub-dept didn't need access to the raw SSN, but did need access to less personal data, j could see those stored in separate tables.

But anyway, you're helping clear things up for me. I really appreciate the pseudo code level example.