Government-Aided Phishing
Anonymous writes "A Florida county is posting the Social Security numbers, bank account info and other sensitive data of hundreds of thousands of current and former residents on its public Web site, Computerworld is reporting. A county official says there's no problem, since the postings are in compliance with state law requiring public availability of records." From the article: "The breach stems from the county's failure to redact or remove sensitive data from images of public documents such as property records and family court documents, Hogman said. Included in the documents that are publicly available are dates of birth and Social Security numbers of minors, images of signatures. passport numbers, green card details and bank account information."
i think it's time for me to head to the local bank.
what's going to convince them that this is a bad idea?
This has "stupid" written all over it.
Anyone want to bet information of local politicians have been exempt from this? Hmmm? Anyone?
Life is not for the lazy.
This info was Public Records since, well, always :-)
Anybody could go to town hall and browse the registry of deeds and other repositories. It just became more convenient to do it, but it was always possible.
In a way, we always relied on "security through obscurity" keeping this information (kinda) private, and are now all upset at the obscurity withering out.
In Soviet Washington the swamp drains you.
Look at it this way. SSN's aren't what they were meant to be. They are your "everything" number now. In some respects, is the value of the SSN being diminished because they are so easy to use and get a hold of now? It could possibly be a big plus because now we get into a situation where they just aren't worth using so everyone stops using them for important transactions. Lets hope...
The federal government needs to do this on a nationwide scale. The SSA should give a deadline, say one year, then publish all SSN data. SSN is not supposed to be used as an identifier, nor as a secret. Doing this will force organizations to change their procedures, thus hampering identity thefts and other security issues that result from treating a public, non-unique identifier as a secret.
"A county official says there's no problem, since the postings are in compliance with state law requiring public availability of records."
If all things in compliance with the law are perfect, then what the hell we need politicians to change/update the laws for? Fire the bastards.
Stupidity and corruption transcend petty human notions of party lines.
These public servants are doing more to destroy America than anyone flying into a building could ever accomplish
I agree, this is a good thing. Let the use of SSN collapse as a means of granting information. Trying to hide a small number from birth to death is ridiculous. It's equally aweful that companies can claim that you did something because that number was used for the transaction.
What better identity to commit a crime under could there possibly be?
Is it fascism yet?