Slashdot Mirror


Website Posts Partial SSNs of Politicians in Protest

John3 writes "The Foundation for Taxpayer & Consumer Rights has posted partial Social Security numbers for several California politicians to protest their vote against pending privacy legislation. According to a San Francisco Chronicle story, the SSNs were purchased on the Internet for $26." Now there's an effective way of showing the problems of the status quo.

43 of 257 comments (clear)

  1. Change their minds? by Gr33nNight · · Score: 5, Insightful

    This was done after the bill was passed....how could posting the SSN after the fact change anything?

    1. Re:Change their minds? by John3 · · Score: 5, Informative

      Exactly...in fact the article says that the legislation may be reconsidered on Monday.

      --
      "We make our world significant by the courage of our questions and by the depth of our answers." Carl Sagan
    2. Re:Change their minds? by Jason1729 · · Score: 5, Funny

      It might make politians think twice next time.

      It would be nice if they'd think once.

      Jason
      ProfQuotes

    3. Re:Change their minds? by Anonymous Coward · · Score: 4, Informative

      This was done after the bill was passed....how could posting the SSN after the fact change anything?

      Actually it was done after the bill was killed. If the bill had passed, what they posted may have been illegal, as it stands they were showing the politicians what exactly they could have prevented.

  2. Why only partial? by anthony_dipierro · · Score: 5, Insightful

    Just post the whole thing. It's not like it matters. Bill Gates' social security number is 539-60-5125. So what?

    1. Re:Why only partial? by TomGroves · · Score: 5, Insightful

      If it doesn't matter, why don't you post yours instead of Gates's?

    2. Re:Why only partial? by anthony_dipierro · · Score: 3, Interesting

      Well, the reason is because if I post my own SSN, then I could be considered to be implicitly allowing others to use it. I don't care if someone else posts my SSN, but I'm not going to do it myself.

    3. Re:Why only partial? by rattler14 · · Score: 3, Informative

      Well, it actually does matter. Say you found Bill's first usa visa credit card on the ground. If you call their 1-800 number (written on the back of the card), they ask you for the last 4 digits of the primary card holders social security number for certain transactions. While this method is by no means fullproof (or even that effective at all) it is still a security check point to someones financial data. If one can easily access a person SSN (and thus their zip code, middle name, and various other trivia that could be used as a security check point) then it becomes much more difficult to authenticate financial transactions over the phone using an automated system.

      I know this seems like a very picky example, but I'm sure stuff like this actually happens.

      --
      my last sig was too controversial... now, a new and improved useless sig!
    4. Re:Why only partial? by John3 · · Score: 3, Funny

      Email it to me privately and I'll post it for you.

      John

      --
      "We make our world significant by the courage of our questions and by the depth of our answers." Carl Sagan
    5. Re:Why only partial? by violent.ed · · Score: 5, Insightful

      Any financial institution which uses it as such does so at their own risk.

      Incorrect, they do it at YOUR risk.

      --
      - You're not paranoid, they really are after you.
    6. Re:Why only partial? by Cyclometh · · Score: 3, Interesting

      Actually, in the case of major political figures (which probably does not include California assembly members), actors/actresses and other famous individuals, the government, in particular GSA and the Social Security Administration, have flagged their numbers.

      Having known people who work for the SSA, I've heard stories of having to deal with processing a legitimate information request for a major figure, such as an actor or member of Congress, and having to explain every aspect of the actions taken the next day, because any processing of data using a flagged number triggers an internal review.

      If you try and use that SSN for anything, you'll very quickly be getting a visit from some individuals with their sense of humor surgically removed, and you'll very likely not be seen for a while.

  3. i say... by deadsaijinx* · · Score: 3, Insightful

    good for them. This isn't an extorion of a threat, as some claim. As they have stated in their defence, it is a demonstration of the vulnerablity of ones information. Had they released the entire SSN, or threatened to do so, then I would not support them. But as it stands, they have provided a strong demonstration of a need for increased legislation toward the protection of privacy.

    --
    YOU SUCK BALLS!
  4. Trading Card by Jad+LaFields · · Score: 5, Insightful

    Gray Davis trading card, "Privacy Series". Mint condition. Best offer.

    I love it when political groups pull off silly stunts to make a point. Politics grows more and more entertaining and less helpful everyday.

    --
    [SIG] It's like putting a moose in the blender -- a recipe for disaster!
  5. Transparency vs secrecy by 1010011010 · · Score: 4, Insightful

    Either transparency or secrecy is acceptable -- as long as both the citizenry and the government have the same thing.

    --
    Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
    1. Re:Transparency vs secrecy by clenhart · · Score: 4, Insightful

      Huh?

      A transparent government is necessary for the people to control it. How else do we evaluate how our "employees" are doing?

      The privacy of individuals is critical to dissent.

      It does not have to be the same.

      It's sad that people are throwing away their freedoms.

  6. Valid Point, but.. by johnnick · · Score: 4, Insightful

    Had they done it before the vote, or gone to each Assembly-person and demonstrated the capability before the vote, that would've been legitimate lobbying. This is just petty and serves to make the Assembly-people less likely to listen to this group in the future.

    John

    --
    "The plural of anecdote is not data."
    1. Re:Valid Point, but.. by Lord+Kano · · Score: 5, Insightful

      Had they done it before the vote, or gone to each Assembly-person and demonstrated the capability before the vote, that would've been legitimate lobbying. This is just petty and serves to make the Assembly-people less likely to listen to this group in the future.

      I respectfully disagree. This is a perfectly valid way to express dissatisfaction with the decision of these lawmakers.

      "Really assemblyman? This privacy measure isn't needed? Will your position be the same when it's YOUR information instead of ours?"

      I agree 100% with these guys.

      --
      "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
    2. Re:Valid Point, but.. by Anonymous Coward · · Score: 3, Insightful

      > legitimate lobbying...

      They assembly people are elected and sworn to uphold the public good.

      They failed to do so.

      The entire point of a representative democrocy is that the whole of the population need not be routinely engaged in governmental matters. Your assumption suggests we do, in fact, need to because our "representatives" will not act appropriately (or with even slight common sense) otherwise.

      Again, they failed in doing their jobs.

      I see NO point why they shouldn't pay the price for the ignorance and arrogance they displayed in failing to protect their citezens. I'd have posted their full SSN, and been MOST happy if any of them were to actually suffer id theft because of it.

      Good for us, good for them. Period.

    3. Re:Valid Point, but.. by Lord+Kano · · Score: 3, Interesting

      My point is that by performing the same exercise before the vote, they might have influenced the vote to go the way they wanted. By doing this after the vote, at best, they require the process to start over again with a new bill to achieve what they want.

      Had they asked nicely before the vote (which I assume they did, they are lobbyists after all) they would have been ignored. If they had released this information they would have been accused of attemption to extort the assemblymen.

      You don't persuade a burglar to not rape your wife or steal your property. You make sure that it is too costly for him (personally) to even try. If the big dog in the back yard doesn't discourage him, maybe the NRA bumper sticker on the pickup outside will.

      Ask nicely beforehand, and if you are ignored, punish severely afterward.

      These politicians already cared nothing for the privacy bill, perhaps because it was an abstract idea to them. Now that their information is at risk, it is more than just a concept. It is important to each and every one of them. Who cares if they like you? They will do the right thing because it will now benefit them.

      --
      "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
  7. Whoop deedoo by KingArthur10 · · Score: 5, Insightful

    If you really want to find someone's social security number, you can do it a million ways. Every business they work for has it on record, the credit beuru has it, your D/L has it tied in for police. All anyone really has to do is do a credit check on you, claiming to be a possible employer and such. I am not afraid of my SSN being released. Yeah, someone could really screw with my life, but then, I could sue the heck out of whatever company released it. Anything in life either has to have a SSN or a Birth Cirtificate anymore. Why not just implant babies with chips and call it a day? ;-)

    --
    I came, I saw, She conquered.
    1. Re:Whoop deedoo by KingArthur10 · · Score: 5, Interesting

      Actually, the credit beuru once accidently typed in the wrong SSN of a convicted felon. After that, the man's SSN that they typed in was suddenly not able to find a job or get credit for anything. After at least 10 years in the gutter, one of the people he looked to employment said to him "we don't hire people with your history". The man began inquiring what that must mean and found out that the credit bearu screwed up his account by saying he was a convicted felon. He then sued the bearu for a good 20-50million dollars and is now living on easy street. All I was really trying to say is that if someone wants to get your SSN, all they have to do is act like an employer and do a credit check. There are a million other ways, too. When I worked at CVS, our login code was our SSN. All someone had to do would be watch closely a few times, and wham, they've got it.

      --
      I came, I saw, She conquered.
  8. SB1386 tie in by eericson · · Score: 5, Interesting

    What I find amusing about this situation is that these are the same leglislators (scuse the spelling) that unanimously voted for SB1386 when their bank/credit info was compromised, yet don't want to take that last step now to protect everyone's privacy.

    The more time I spend in CA the more I realize our state legislators are like ill trained puppies: They're cute to look at, but occassionally you need to whack them with a magazine to keep them from crapping on the carpet.

    -E2
    --
    The evil monkey commands you to dance.
    1. Re:SB1386 tie in by johnnick · · Score: 5, Informative

      This actually exposes an interesting gap in SB 1386.

      Under SB 1386 (which goes into effect on July 1), any entity covered by the law has a duty to notify California residents âoein the most expedient time possible and without unreasonable delayâ when it is known, or reasonably believed, that âoepersonal informationâ stored on the entityâ(TM)s computer systems has been disclosed to unauthorized persons as a result of a security breach. An entity is only exempt from the notification requirement when: (a) the âoepersonal informationâ disclosed was already publicly available through the federal, state, or local governments; (b) the âoepersonal informationâ was stored in an encrypted form; or (c) the unauthorized person would be unable to link the California residentâ(TM)s name with other sensitive data (e.g., Social Security number, credit card number, etc.). Entities that fail to comply with SB 1386 can be sued by individuals whose personal information was disclosed for damages suffered due to the disclosure (i.e., damages resulting from identity theft).

      But, SB 1386 does not cover information legitimately sold, such as the SSN information acquired by the lobbying group. (I'm assuming that they weren't receiving stolen information.)

      John

      --
      "The plural of anecdote is not data."
  9. SSN Hacking by blanktek · · Score: 4, Informative

    Useful information derived from SSN can be found here . You can see everyone was born in CA by the first three numbers. Group numbers can be verified, but isn't the serial numbers the important information?

  10. "vote our conscience" hahahaha by konichiwa · · Score: 5, Insightful

    from the sfgate article:

    "We should be free to vote our conscience and not be threatened or harassed if we choose to vote contrary to people who are lobbying for special legislation," said Assemblyman Ed Chavez, D-La Puente, one of the lawmakers whose partial number was published.

    What a crock. I wonder how much money he takes from special interest and lobby groups that pay him to "vote his conscience."

    Politicians = soul merchants

    --
    Never argue with an idiot, he'll just lower you to his level and beat you with experience.
  11. politicians should stop complaining by Anonymous Coward · · Score: 4, Insightful

    You dont give us privacy and then you demand privacy . Well that doesnt sound like a good *explitive deleted* deal?
    If you dont like having your SSN number spread around the internet then perhaps you should pass legislation to protect everyone (of course instead will end up with legislation that only protects politions and those who have a lot more than $26 to line there pockets).

  12. Re:So does that mean by Anonymous Coward · · Score: 5, Funny

    1. Buy Bill Gate's SS for $26
    2. Slam face into tree repeatedly until looking like Gates
    3. Buy stupid glasses
    4. Identity theft
    5. Profit!

  13. Release more than just the first 4 numbers. by Lord+Kano · · Score: 4, Insightful

    Thousands of people who were born in the same part of the country as me the same year I was have the same first 4 numbers.

    All that can be deduced from that info is an approximate region of birth and possibly age.

    Perhaps these guys should release one extra number per week until they get the privacy laws corrected.

    LK

    --
    "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
  14. Glorious by The+Tyro · · Score: 3, Insightful

    The man published the partial SSN's after the vote, so he wasn't trying to extort the legislators to vote for the bill. I'd say the extortion/threatening charges are a bit out of line for this.

    Heheh... what a great poke-in-the-eye to the legislators, and a great demonstration of what the issue was really about.

    No full SSN's were given out, so no harm was really done here... just some angry lawmakers... Let's hope they have the introspection to learn from this jab.

    Bravo.

    --
    Even if a man chops off your hand with a sword, you still have two nice, sharp bones to stick in his eyes.
    1. Re:Glorious by miu · · Score: 4, Interesting
      Heheh... what a great poke-in-the-eye to the legislators, and a great demonstration of what the issue was really about.

      The problem is that civil servants (such as these politicians) often believe that they are our superiors. So most of them are incapable of realizing that privacy laws are for everyone. Instead they will look at creating a law or applying an existing law in such a way as to protect just themselves. That was exactly the reaction of the civil servants involved in the garbage search incident in Oregon.

      --

      [Set Cain on fire and steal his lute.]
  15. I found Kevin Mitnik's SSN by Rosco+P.+Coltrane · · Score: 3, Funny

    Here it is (partially) :
    xxx-xx-1337

    And of course, Bill Gates (again, only partially) :
    666-xx-xxxx

    --
    "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
  16. Semi O/T Rant... by curunir · · Score: 3, Interesting

    The problem isn't that we need privacy laws to protect user's SSNs...those can be publicly available. The problem is that the SSN has been overloaded by businesses and other organizations.

    A SSN is a number granted to an individual by the government for the purposes of identifying that person to the government. It shouldn't be a means of identifying someone to a credit card company, bank or other institution (my university used SSN as our student ID numbers). If one of these institutions wants to identify me by a number, they can assign me their own damn number.

    What we need is legislation preventing private institutions from assigning extra significance to any government issued piece of identification. Just because SSN is a handy primary key for their db tables doesn't mean that they should be allowed to use it.
    </rant>

    --
    "Don't blame me, I voted for Kodos!"
  17. SSN: Public or Confidential Information? by GillBates0 · · Score: 5, Interesting
    Social Security numbers were originally intended to be used only by the social security program and were supposed to make record keeping easier. They were never meant to function as an authentication mechanism.

    The problem arose when the mapping between a person's name (or identity) and the SSN was considered confidential information, and a number of government and non government organizations started treating the knowledge of a person's SSN as an authentication mechanism.

    Many companies treat the fact that you know (the last 4 digits of) a social security number combined with some additional information like the last name and street address as proof that you are indeed who the record states you are.

    This is absurd. Either each individual should be assigned a secret id, which when used in conjunction with the SSN proves one's identity, or some other mechanism to verify identity should be developed. As long as the SSN continues to be (ab)used as a supposedly public index into a database, as well as a piece of confidential information, privacy will remain a farce.

    --
    An Indian-American Hindu committed to non-violent thought/speech/action alarmed by the global explosion of radical Islam
    1. Re:SSN: Public or Confidential Information? by lnoble · · Score: 4, Insightful

      You're completely dead on. I hate it whenever employers, financial institutions or ngo/go's ask for it. Before the IRS started using it as an ID your were not required to give it to anyone except the Social Security Agency. Because the IRS started using it, employers and just about every financial institution there is needed to use it as well. 98% of the organizations that I 'need to' give my number to have nothing to do with social security.

      Why doesn't the IRS/money people make their own number, dividing up the risk of the almost inevitable possibility of its theft. This would dramatically reduce the risk of falling victim to social security fraud.

      Some resources:
      SSN/Privacy FAQ's (cpsr.org)
      General Privacy info

  18. Presume negligence by Animats · · Score: 4, Interesting
    The easy way to fix this is to legislate that any person or institution who uses a social security number, or part thereof, for authentication purposes is presumptively negligent. Any person or institution that uses a SSN for identification purposes assumes all risk thereby, including liability to other parties, and cannot disclaim, offset, or shift said liability.

    This allows the use of SSNs as an identifier, but not as an authentication token. Lawyers have a hard problem with that distinction, but they understand negligence.

  19. You are correct by DudemanX · · Score: 3, Informative

    It only determines where you were registered for the number. I was born in New Jersey, but have a California prefix of 572. We moved out here whan I was about 3.

  20. SSN makes you life easier. by Simon+Lyngshede · · Score: 4, Interesting

    I would hate not having my CPR number (Danish Social Security Number). It make identification so much easier, I only wish I could use it for more things.

    I never hear of anyone having their CPR number misused. Try to remember that it's just a easier way of identification and NOT a tracking device inserted up your ass. Your more like to be tracked when you use your VISA card than by having a SSN. I'm sure Wal-Mart knows more about most Americans than the US government does.

    Why are Americans so much more paranoid than other people? Have your government really screwed over that many times? If you can't trust your government you have a problem. Please do something about it.

    1. Re:SSN makes you life easier. by bucky0 · · Score: 4, Interesting

      The problem is that in the US (I'm not sure how it works where you live) if I have your SSN, I can basically ruin your life. I can open a credit card in your name and run up thousands of dollars of charges with your SSN. 'Identity fraud' as it's called is a serious problem which ruins thousands of people's lives every year. This bill (as I understand it) limits how much the government can throw around your SSN to try and keep it out of thieve's hands.

      --

      -Bucky
    2. Re:SSN makes you life easier. by IvyMike · · Score: 3, Insightful

      Why are Americans so much more paranoid than other people? Have your government really screwed over that many times?

      How can you Europeans be so laid back about this, when you've got examples of ethnic cleansing in Germany, Kosovo, Turkey, Macedonia, among others.. Don't get me wrong...Americans also have our own checkered past (Slavery, Japanese interment camps, near genocide of Native-Americans, etc.) but at least we're worried about our own ugly past repeating itself.

    3. Re:SSN makes you life easier. by d2ksla · · Score: 4, Insightful

      The difference in Europe (at least Sweden) is that the SSN is like a username instead of a password (like the US SSN is).

      Want to get a credit card? You need to show up at the bank with a picture ID.

    4. Re:SSN makes you life easier. by ctr2sprt · · Score: 4, Insightful
      We have a fundamentally different view of governments. Americans view government as a necessary evil. The only real difference of opinion among us is how much is actually necessary. I don't think there's an American alive that likes our government, trusts it to do the right thing, or feels it should be as big as it is. This isn't a new thing, either; the Founders built our government feeling exactly the same way.

      You think of government as a way of helping people. We think of government as a way of taking away people's rights. Obviously we want some rights to be restricted - like the right to kill someone and take his stuff - so we suffer ourselves to be goverened. But we all firmly believe that smaller governments are intrinsically better than large ones.

      It's also a factor that, in a strange way, most Europeans are more jaded about politics than Americans. Oh, we think our politicians are corrupt liars too, but we have hope that they can change. It seems like most Europeans have just accepted that their representatives are crooks and have given up on actual democracy. Well, we're nearing that point, so perhaps we're not so different after all.

  21. Why is SSN such a big deal? by Ed+Avis · · Score: 4, Interesting

    The root of the problem is that any system relying on keeping your social security number secret is broken. An SSN is an identifier for a person, it is like a name. You don't keep your name secret (Wizard of Earthsea aside) so why should the number be different?

    Not that you'd necessarily want people to be able to find out and disclose your number whenever they felt like it - there are still privacy considerations even with 'useless' information - but if disclosing the number exposes you to fraud then the fault is with the systems that rely on SSN to authenticate (rather than identify) an individual.

    Every cheque you write has your bank account number on it. Disclosing the number doesn't automatically expose you fraud (unless you also supply headed notepaper and do other stupid things). If the banks can do it, why not social security?

    --
    -- Ed Avis ed@membled.com
  22. Re:can anyone... by silentbozo · · Score: 4, Insightful

    Because they all use SS# as a primary key in their databases.

    Which of course, is a stupid thing to do, since the SS# is NOT GUARANTEED TO BE UNIQUE. In other words, the financial industry would rather pay millions to hire lobbyists and lawyers, than pay the millions to fix lazy programming and procedures, UNLESS threated with dire legal consequences (for example, Y2K liabilities.)

    Not to mention they all sell your personal info, trade it amongst themselves, and view any legislation that would crimp that practice as a threat to one of their core businesses. Mind you, this industry really only exists in the US - this country is one of the few places in the world where you can open a bank account and apply for a credit card/loan without ever showing your face in person.

    This is the same kind of thinking that lets credit fraud happen - they rather just change your card number and cover the charge (shafting the merchant who got defrauded in the process) than actually tracking down the bastard who stole your card/identity. As far as the banks are concerned, it's a cost of doing business. The banks/credit bureaus are not interested in prosecuting the criminals who steal identities because it doesn't hurt them the slightest bit - they pass all the costs to the merchants. And if you get screwed in the process? Well too bad for you.

    Now, why is it that medical data is now better protected than your other personal info? We need a version of HIPPA(sp?) for the financial industry, TODAY.