Why is Facebook 2auth reset harder, than stealing someones identity in US?
this post was submitted on 02 Feb 2025
358 points (97.6% liked)
News
24300 readers
4972 users here now
Welcome to the News community!
Rules:
1. Be civil
Attack the argument, not the person. No racism/sexism/bigotry. Good faith argumentation only. This includes accusing another user of being a bot or paid actor. Trolling is uncivil and is grounds for removal and/or a community ban. Do not respond to rule-breaking content; report it and move on.
2. All posts should contain a source (url) that is as reliable and unbiased as possible and must only contain one link.
Obvious right or left wing sources will be removed at the mods discretion. We have an actively updated blocklist, which you can see here: https://lemmy.world/post/2246130 if you feel like any website is missing, contact the mods. Supporting links can be added in comments or posted seperately but not to the post body.
3. No bots, spam or self-promotion.
Only approved bots, which follow the guidelines for bots set by the instance, are allowed.
4. Post titles should be the same as the article used as source.
Posts which titles don’t match the source won’t be removed, but the autoMod will notify you, and if your title misrepresents the original article, the post will be deleted. If the site changed their headline, the bot might still contact you, just ignore it, we won’t delete your post.
5. Only recent news is allowed.
Posts must be news from the most recent 30 days.
6. All posts must be news articles.
No opinion pieces, Listicles, editorials or celebrity gossip is allowed. All posts will be judged on a case-by-case basis.
7. No duplicate posts.
If a source you used was already posted by someone else, the autoMod will leave a message. Please remove your post if the autoMod is correct. If the post that matches your post is very old, we refer you to rule 5.
8. Misinformation is prohibited.
Misinformation / propaganda is strictly prohibited. Any comment or post containing or linking to misinformation will be removed. If you feel that your post has been removed in error, credible sources must be provided.
9. No link shorteners.
The auto mod will contact you if a link shortener is detected, please delete your post if they are right.
10. Don't copy entire article in your post body
For copyright reasons, you are not allowed to copy an entire article into your post body. This is an instance wide rule, that is strictly enforced in this community.
founded 2 years ago
MODERATORS
Thanks to Verizon/TMobile/AT&T being the swiss cheese fort Knox, I'd be surprised if Felon Skum didn't have it.
Companies have played fast and loose with our PII for so long that it's at a point where we need something else to act as that value so it's actually secret. But with this administration, that would end up being a wrist tattoo....
I already have a suspicion that he might already be leaking information out to third parties from Twitter (private messages, etc.), so...
Everyone has my social security number. It's one of the stupidest security fails of all time that nobody seems to want to fix. And now there is an entire "credit protection" industry so it will remain that way.
What happens when we file our taxes? Will we even get our refunds?
Would be funny if there was a mass movement and nobody paid their taxes.
Unfortunately, most people have their taxes withheld from their paychecks, and file their returns so they get a refund.
If people didn't file returns, the IRS would end up with more money.
I kinda wish this were possible. I'll pay my state, fuck the feds
Was just worrying about this with my spouse
All of my data got breached multiple times going back to the dot-com bubble days, by Yahoo, the original 2015 OPM Beach and by two of the big credit bureaus for a start. If Musk has my social at this point it doesn't matter.
SSN is not a password and anyone who uses it like one doesn't understand security because you can't change it. It's a user ID, like a finger print or email address.
In principle yes; in practice, no.
"May or may not, but mostly may."
It's safe to say he has a lot more than that
Not mine. I live in a country that isn't an absolute joke.
Keyword unfortunately being "absolute"
What’s it like? :(
Must be nice
Just wait until dear old Nigel comes.
Starmer might be your Biden, a short but underwhelming break between far right incompetence (BoJo and Nigel).
If it's the UK, the government probably has assigned you a National Insurance number.
Yes, but apartheid boy has nothing to do with the UK.
He should have nothing to do with the UK, but he's still sticking his fingers in British pies by petitioning for Tommy Robinson's release and promoting Reform UK.
Stephen Christopher Yaxley-Lennon (the shite) will stay where he belongs regardless, and Reform will never be anything but a gammon minority party.
I hope it stays that way, but they are already pressuring everyone to move further right. I'm worried that the gammons will vote them in
We also have id codes but you can't do anything with it except tell your dob. Its used as a username for aystems that need extra security like voting, taxes, medical system or banks and such
So does everyone, thanks Equifax
It's weird that SSNs are treated as some sort of secret number given they don't have any security features. They were never supposed to be used the way they're used today, but there's no good alternative yet.
The US really needs a replacement, for example a national digital ID based on PKI (public key infrastructure) where you can generate new ID numbers based on a private key. Each bank, lender, employer, etc that needs it would get a unique ID that only works for them, and you could revoke access for just that one company if needed.
Kinda like how OAuth/OIDC login works, where you can log in to sites using your Google account, Apple account, self-hosted Authentik or Authelia, etc. but the site you're logging in to never sees your password. If a site/app misbehaves, you revoke their access to the account, and everything else that uses the account can keep working.
I agree in principle, but try explaining that to your grandmother.
Here's your ID. You can decide who gets to have it.
Easy. The average person isn't going to care about the nerdy shit behind it, any more than they care how Facebook works behind the scenes.
They've been pushing against a national ID for decades so good luck convincing grandma it's not the mark of the beast or something.
"why can't you just use my SSN like that nice genius billionaire Elon Musk"
The US really needs a replacement, for example a national digital ID based on PKI... you revoke their access to the account, and everything else that uses the account can keep working
There is already an open standard growing around exactly this concept, Web5 Distributed IDs (DID): https://dev.to/tbdevs/what-is-web5-233o
Disclosure: I worked on the implementation for an Open Banking company (does that need to be disclosed? I'm including it lest someone think I'm a shill)
Bruh who doesn't at this point?
Elon Musk has to go.
Just to culture shock Americans: it's not exactly the same but in Sweden our personal numbers are kept in the open. Even online. Searchable databases with names, phone numbers, addresses etc. It tells you if someone has a dog. It tells you if they have a car. Which car, even. Some tell you the income of the person you're searching for. Sites even exist that could tell you if I've commited a crime. Some people think that's unreasonable. Irresponsible even!
That said, as pertains to the article, the fact that he has that info seems pretty unreasonable and irresponsible.
My USA town will let you look up your taxes with just your last name and first initial. You can find out what real estate and car someone owns with that. Dog license seems to be in a different system.
My salary is public information because I'm a public employee.
At least in the past, you could use a person's ssn to open credit cards, change utilities, and generally ruin someone's life. Someone took out a credit card with my SSN when I was like 9 or 10 and it caused issues when I became an adult and tried to get a student loan for uni.
load more comments
(5 replies)
load more comments
(2 replies)
Didn't Elon get hacked and his SS number leaked?
No, I'm not about to go search for that, but I'm pretty sure that happened, with the 23andme data breach...
view more: next ›