The government doesn't use SQL
PNW clouds @ ericatty @infosec.pub Posts 0Comments 121Joined 2 yr. ago
PNW clouds @ ericatty @infosec.pub
Posts
0
Comments
121
Joined
2 yr. ago
Deleted
Permanently Deleted
In college, early 90s, our student IDs had our photo and SSN on it
I've operated ever since under rhe assumption anyone and everyone has access to it.
Then with all the data breaches over the last 10/15 years? Freeze credit reports with the 3 reporting agencies for free. Check for extra accounts with the free annual credit report pulls.
For all practical purposes, our SSNs are easily obtained by someone who wants it.
I'm not sure what the solution is, but a unique identifier has to be housed somewhere where in can be accessed in a format humans can read, which means it can be accessed and dumped so it's no longer private or secret.
I'm not a fan of biometrics, and I tolerate 2FA. I really think it's more important we change how we think about and use personal, unique, identifiers (like SSNs)