Slashdot Mirror
All The World Over, Your Stolen I.D.
MSNBC is running a story about a massive identity theft which is apparently traceable to people who ordered wireless service from Verizon. If you've gotten service online from Verizon, you might want to check your credit card bill post-haste. And make sure to cancel your Social Security number and date of birth too.
Y'know, America could salvage its image -and- make a real impact on crime, if "System Admining Under The Influence" and "Data Warehousing, Without Due Care And Attention" were hanging offences.
(Brings a whole new meaning to "Blue Screen Of Death".)
It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
This goes to show you that there needs to be controls over what sort of information a company can ask from an individual. Sure the are probably exceptions to the rule, but date of birth and social security numbers should not be necessary to open an account with anyone, but a bank.
Maybe this is where we need to use the approach of trusted third party authorization. Basically the only person you share this trusted information with is your bank and it is the bank who gives to a unique, time based, validation id to share with the company you are buying the service from. If a bank is incapable of keeping your details secret, then you know that you don't want an account with them.
Jumpstart the tartan drive.
I'm glad you put out this warning. I've discovered that over 16,000,000 people around the world are claiming my birthday as their own!
--
Sheesh, evil *and* a jerk. -- Jade
It cost me over 5,000 in lost charges, but luckily Visa has a 0 tolerance on fraud charges. For those with "Stolen Identity" change your SSN and DL # NOW because they can effectiley call your bank and change your PIN number or obtain existing PIN #'s and Mac/ATM withdrawals are NOT guranteed nor protected.
Firecash.com is an offshore billing company that does transactions for 3rd party billing companies so this is ONE WEBSITE TO WATCH. I have already filed complaints for both the casino, the casino's processor and firecash.com because they allowed charges with incorrect name, address, phone number AND expiration date to post.
It took over a month to get my money back, every check i wrote bounced, i couldn't pay my mortgage and i didn't get to do shit for my birthday. DON'T LET THIS HAPPEN TO YOU.
Keep 2 seperate banks. Be it as simple as a 2nd savings account or something with your work or local credit union. Don't put all your eggs into one basket. Since i had reported fraud the bank was required to lock ALL MONIES Until the dispute was processed and that alown takes days since they have to file affidavites and work with security departments of visa and such.
This sucks for alot of reasons, and i feel sorry for those who will be screwed for years to come.
Basically cost me my job since my credit cards put me on old because the payments bounced and i traveled 100% of the time.. airlines don't accept cash or promises to pay for tickets. Even my corporate card was locked because i had made a payment with a check that bounced because the account was locked before they deposited it.
So now i have disputes with check authorization companies, letters to my creditors, affidavites to my mortgage company, copies of statements and official letters to my car loan companies and letters to the 3 major credit departments just to fix up MY credit.
Take care of yourself, and don't put all your eggs in one basket. I never used my visa check card online, and now i don't even let my bank link my check card to my savings for rollover protection because that is how i lost every dime i had since the charges kept coming and the bank kept on transfering from savings to pay for them.
scary world we live in when people can generate numbers, steal your identity and post the charges and make out.. if it takes a bank 1 month to investigate that is way to long in the history time since website logs are archived or gone, ip's have long changed (on dhcp or dynamic dialups) and well, you should understand how things work.
Who cares about SSL? SSL is important for maybe one billionth billionth of the time your data is in someone elses hands. Ok, so the data is encrypted in transfer. Who cares, when the recieving company is happily saving away your data on a NT machine running It Isnt Secure? Every script kiddie and their grandmothers little dog can wait until two seconds after you press submit and dig the data out of there after that soooo secure SSL transaction.
To protect yourself:
Never enter nondisposable data. Use a disposable email address. Use a disposable CC number (or at the very least a low-limit creditcard). Never enter Social Security numbers (fake one, or use another option). Avoid using your real name. Avoid entering your real phone nr. Dont enter your age. Dont enter your profession. Make the data worthless and corrupt.
In my opinion the only way to handle this problem is to make it illegal for any company to store any sensitive information at all. They need the information? Fine, they get to have it for the 5 minutes they need it, then it MUST be wiped.
Hackers stealing the data is just one simple way the data gets out. Social engineering to disloyal employees through mergers acquisitions etc etc are other ways.
If you ever give out the information it will be stolen and misused.
Giving Your Number To Others
If a business or other enterprise asks you for your Social Security number, you can refuse to give it to them. However, that may mean doing without the purchase or service for which your number was requested. For example, utility companies and other services ask for your Social Security number, but do not need it; they can do a credit check or identify their customers by alternative means.
Giving your number is voluntary even when you are asked for the number directly. If requested, you should ask:
why your number is needed;
how your number will be used;
what happens if you refuse; and
what law requires you to give your number.
The answers to these questions can help you decide if you want to give your Social Security number. The decision is yours.
Our primary message is this--be careful with your Social Security number and your card to prevent their misuse.
If you think someone is misusing your number, ask us for the leaflet, When Someone Misuses Your Number (Publication No. 05-10064).
Originally your SS # was never supposed to be given out to anyone! But big business beat up big brother and started using it to profile each and every American. In fact, the business community forced the Government to require *all* citizens to have a SS #. So now from the second you pop out of your mother's private parts, you have to be registered with the SSA.
I personally think the ending to "Fight Club" would solve this problem once and for all.
Strange women lying in ponds distributing swords is no basis for a system of government.
did anyone else get an ad of OfficeXP for this article? I took a screen shot of mine: "For Identities, One Password." Maybe it's just the lack of sleep but I find this very amusing :)
-----
09
http://www.cpsr.org/cpsr/privacy/ssn/ssn.structure .html
Alcohol, Tobacco and Firearms should be the name of a store, not a government agency.
A buddy of mine recently got new wireless service through Verizon, but in the last week he's looked different... about half a foot shorter, maybe 50 lbs heavier, too.
Whatever... he's spending money like water and treating everybody at happy hour, so it's all good...
God bless those Albino Ninjas...
...you *can* legally change your SS# *if* you can prove that your current one has been used in ID theft and exposes you to similar crimes in the future.
.sig really belongs to my purusa
Link here.
this
You can avoid this problem by doing what I do...vigilantly maintain maxed-out, shitty credit. That way no one can make charges to existing accounts or open new ones. Thank god I got a head start on this in college. Little did I know when I was buying rounds for my friends that i was actually safeguarding my identity.
--
Do not taunt Happy Fun Ball(TM)
Now, from Verizon Wireless: We know you're busy. Sometimes you don't have time to enjoy the money you're making. That's why we at Verizon have come up with PERSON-FORWARDING. We forward your identity to a less busy person who can spend your money on your behalf. Just another service to make your life easier from Verizon Wireless.
</James Earl Jones voice>
Hey wait a minute. Bell Atlantic became Verizon. I used to have them. Crap.
m00.