Slashdot Mirror


Does Your Employer Still Use SSNs?

An anonymous reader asks: "My company, a fairly large telco, still uses social security numbers for non-financial purposes; mostly for our IT ticketing system. I find it amazing that in these times, with how easy it is to use an SSN to obtain credit, that any company still does this. I've heard talk for almost eight years that the practice is going to be stopped but little progress has been made. How many companies out there still use SSNs so openly? Since it seems that nobody is in a hurry to solve this issue, what can be done to speed the process up?"

193 comments

  1. Simple by SecaKitten · · Score: 5, Funny
    what can be done to speed the process up?
    Simple, apply for credit cards in your boss's name.
    1. Re:Simple by BKX · · Score: 1

      "Hey, Boss, what's your Social Security number?"

      "Nought, nought, nought. Nought, nought. Nought, nought, nought, one. Damn Roosevelt."

    2. Re:Simple by Anonymous Coward · · Score: 0

      hahhahah that was brilliant thinking

  2. You think you have it bad? by Anonymous Coward · · Score: 2, Interesting

    My company makes us use our ssn as our email address. Talk about being a number...

    1. Re:You think you have it bad? by parasonic · · Score: 3, Informative

      How about the law that you shall not be identified by your SSN?

      How about the law that you shall not be required to give more than the last four digits of your SSN?

      No wonder there are "305 lawsuits" per average company per year...

    2. Re:You think you have it bad? by BandwidthHog · · Score: 3, Informative

      Neither of those laws you mentioned actually exist.

      A business can ask for an SSN when you attempt to buy a nine volt battery with exact change. Perfectly legal. You can, of course, refuse such a ridiculous request. Also quite legal. They can then decline to do business with you. Just as legal.

      It’s only the government folks that are prohibited by law from demanding SSNs.

      --

      Quantum materiae materietur marmota monax si marmota monax materiam possit materiari?
    3. Re:You think you have it bad? by Anonymous Coward · · Score: 0
      How about the law that you shall not be identified by your SSN?

      Too easy to evade. All they have to do is make your id 123-45-6789A. Then they sit there with their bare, smug faces hanging out and say, "A SSN is a structure without alphabetics, is it not?"

      That crap has already been upheld by our corrupt court system.

    4. Re:You think you have it bad? by Anonymous Coward · · Score: 2, Interesting

      Depends on where in the world you are. Those laws do exist here, in Denmark.
      They are critical to prevent the misuse of SSNs. Also you can't require someone to give there SSN, except for spcific situations, e.g. banks can require SSN to open an account.

    5. Re:You think you have it bad? by Anonymous Coward · · Score: 0

      In the United States, those laws are a semi-myth.

      They do exist in the sense that not a lot of people can require your SSN, but are myth in the sense that eanybody can ask for it.

      You do not have to give it out though.

    6. Re:You think you have it bad? by afidel · · Score: 2, Interesting

      Actually they DID exist. The original social security act made it illegal to use the SSN for any purpose other than for the administration of taxes and social security benifits. The law would not have passed without this provision from the reasearch I have done. It was only in the mid 80's with years of unenforcement of the law and the explosion of computer tracking databases that an update to the act (changing benifits and retirement age) carried a rider striking the provision. Due to the way that modern information driven economies work it would be highly difficult to design a system without a unique key that exists across multiple systems, for better or worse that key is the SSN in the US.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    7. Re:You think you have it bad? by toddbu · · Score: 1

      I'm old enough to have a Social Security card from the 1960's that has the words "NOT TO BE USED FOR IDENTIFICATION" printed boldly on the front of the card.

      --
      If you don't want crime to pay, let the government run it.
    8. Re:You think you have it bad? by smbarbour · · Score: 1
      Allow me to quote verbatim, the text from the back of my US Social Security card:

      Do not laminate this card.

      This card is invalid if not signed by the number holder unless
      health or age prevents signature.

      Improper use of this card and/or number by the number holder
      or any other person is punishable by fine, imprisonment or both. ...


      And yes, there are laws that restrict the use of SSN's within the private sector. If the business requests a SSN, a privacy statement must be given indicating what they are going to do with the information given. By obtaining this information, they also have to comply with a number of privacy regulations. (Of note: newer social security cards do not have the "Do not laminate this card." statement on them)
    9. Re:You think you have it bad? by BandwidthHog · · Score: 1

      And I’m young enough to occasionally frequent stores with products that are labelled as being “FOR TOBACCO USE ONLY.” I think that signage carries about as much weight.

      --

      Quantum materiae materietur marmota monax si marmota monax materiam possit materiari?
    10. Re:You think you have it bad? by jsrjsr · · Score: 1

      On the back, my card says a whole bunch of stuff -- none of it includes the text you quote. This is the original SS card that I was issued years ago (the text does include "Rev.(9-61)"). On the front, it states in all caps "FOR SOCIAL SECURITY AND TAX PURPOSES - NOT FOR IDENTIFICATION". It's really interesting to look at the text that appears on older money, too.

    11. Re:You think you have it bad? by Ucklak · · Score: 1
      The back of mine says:


      This is your SSN.
      There are many like it, but this one is yours.
      Your SSN is your best friend.
      It is your life.
      You must master it as you must master your life.
      Your SSN, without you, is useless.
      Without your SSN, you are useless.

      --
      if you steal from one source, that is plagiarism, if you steal from many, well, that's just research.
  3. Wow... that's not right... by soren42 · · Score: 4, Interesting

    My employer, a large bank, doesn't even use SSN's (or, more specifically TIN's - Taxpayer Identification Number) for non-financial information. Our employee ID numbers are unique, distinct, and not based on any formula. Now, that said, any employee that has a corporate credit card or is an officer of the company ("Officer", "Assistant Vice President", "Vice President", "Director", "Managing Director", "Senior Vice President", "Executive Vice President", "Senior Executive Vice President", etc., etc., etc.) does have their credit checked monthly by the company. But, I would assume that any company - not just a bank - would take that precaution with employees with purchasing or signatory authority. That system is based on SSN/TIN at our company - but it makes sense there.

    I believe that there is a Federal Regulation that intends to restrict the use of SSN/TIN numbers for identification by (guessing here) 2010. I'm certain there is such a law for banks, but I believe that it extends to any US public company. Anyone have details on this?

    One last thing - I know many people who use fake SSN's for non-financial uses. For some time, Richard Nixon's SSN was very popular. Now, don't get me wrong, I'm not endorsing that practice - just sharing that it seems pretty common to me.

    --

    "Adventure? Excitement? A Jedi craves not these things."
    1. Re:Wow... that's not right... by TubeSteak · · Score: 2, Informative
      Taxpayer Identification Number (TIN)
      http://en.wikipedia.org/wiki/Individual_Taxpayer_I dentification_Number

      Employer Identification Number (EIN)
      http://en.wikipedia.org/wiki/Employer_identificati on_number

      One last thing - I know many people who use fake SSN's for non-financial uses. For some time, Richard Nixon's SSN was very popular.
      1. A surprising number of organizations will never check your SSN's validity
      2. Try changing a digit, you might end up with a very similar & still valid SSN (that belongs to someone else)
      --
      [Fuck Beta]
      o0t!
    2. Re:Wow... that's not right... by reanjr · · Score: 4, Interesting

      I used to work for a logistics company that GM uses. One of GM's systems required some kind of user authentication (I don't remember the details) that they asked for my SSN to use. I did an MD5 on my actual SSN in hex and ripped out all the letters, used the first 9 as my SSN. It's a nice, repeatable way to generate a fake SSN that is likely to be unique in any system.

      I strongly suggest using fake SSNs for anything possible, but of course, many times you are signing the "I verify that all this information is true to my knowledge" clause. Of course if you use it all the time, maybe you can get away with chalking it up to confusion over your actual SSN.

    3. Re:Wow... that's not right... by Psychofreak · · Score: 1

      My employer bases their id number on the number of people hired before you. As a result of a corporate merger, many people (including myself) were hired all at once causing my former boss to be upset. Her ID ends in 70 and my name is alphabetically one before hers. That was a running joke for a while after her girlfriend figured the numbering out.
      Phil

      --
      Laugh, it's good for you!
    4. Re:Wow... that's not right... by Anonymous Coward · · Score: 0

      huh?

    5. Re:Wow... that's not right... by LearnToSpell · · Score: 2, Interesting

      HSBC, which is what you could call "a large bank," uses SSNs for everything. It's pretty annoying.

      As far as I know, to contradict your info (and I'd love to be corrected on this), any non-governmental company is allowed to use SSNs for whatever they want. I looked it up briefly a little while ago, and that was my understanding, but again, I hope I'm wrong.

    6. Re:Wow... that's not right... by Anonymous Coward · · Score: 0

      He took an entire paragraph of unnecessary details to point out that his employee ID is 69.

    7. Re:Wow... that's not right... by dave562 · · Score: 1
      He took an entire paragraph of unnecessary details to point out that his employee ID is 69.

      Well, at least he stayed true to the essense of the topic...

      Re:Wow... that's not right...

    8. Re:Wow... that's not right... by Anonymous Coward · · Score: 1, Interesting
      Try changing a digit, you might end up with a very similar & still valid SSN (that belongs to someone else)

      Or you might end up with an invalid one. There are rules for how the number is constructed and there are easily-googled programs into which you can input a nember to see if it's valid.

      If a company simply validates SSNs, without any further checking, they may still catch an arbitrarily constructed invalid number.

      Be especially careful about modifying the first three digits. It's well known that the first three follow a pattern across the country, so they constitute a pointer to where the card was issued. Try to use a San Francisco-issued number in Miami and you may get tripped up if someone asks a question about where in the Bay Area you were living when your card was issued.

      If you try to use a number starting with 7, be prepared to talk about which railroad issued your card to you. 700 to 728 were given to railroads to pass out to new employees who didn't already have one through 1963, then discontinued.

      Even if they were still in use, I suspect you wouldn't see a lot of these in the future as few babies apply for employment with a railroad at birth, when our trusting government insists that we be brande^H^H^H^H^H^H included in our national Social Insecurity system. 729 and above are either unassigned (for future use) or are invalid.

      Finally, from http://www.ssa.gov/ssnumber/ (bottom of middle column), "Misuse of someone else's SSN is a violation of Federal law and may lead to fines and/or imprisonment."

    9. Re:Wow... that's not right... by atomic-penguin · · Score: 1

      ...her girlfriend...

      I think your missing the point about the lesbians.

      --
      /^([Ss]ame [Bb]at (time, |channel.)){2}$/
    10. Re:Wow... that's not right... by wwphx · · Score: 1

      I don't think the last four, or perhaps last six, digits are encoded. The SSNs for me and my brother are off by one digit: mine is *04, he is *05. He was born in '59, me two years later. I don't know why my parents got his when they got mine.

      --
      When you sympathize with stupidity, you start thinking like an idiot.
    11. Re:Wow... that's not right... by John+Hasler · · Score: 1

      If they are not using the SSN for financial purposes they have no right to check its validity. To choose a fake SSN to give to phone companies and such you can look up the rules for generating them and choose a not-yet-issued number. Give each business that demands your SSN a different number so that it can't be used to aggregate your personal information and so that you will be able to track "leaks".

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    12. Re:Wow... that's not right... by John+Hasler · · Score: 1

      > As far as I know, to contradict your info (and I'd love to be corrected on
      > this), any non-governmental company is allowed to use SSNs for whatever they
      > want.

      They can ask you for one and refuse to do business with if you if you refuse to give them one, but there is little they can do if you give them a fake SSN because unless they are using it for permitted financial purposes they cannot check its validity with the government.

      I also think that they are forbidden to ask to see your social security card.

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    13. Re:Wow... that's not right... by Schraegstrichpunkt · · Score: 1
      I think your missing the point about the lesbians.

      Whose missing?

    14. Re:Wow... that's not right... by budgenator · · Score: 1

      There is a lady in the next town that has the same first name. Middle initial and last name as my wife, her SSN and driver's license both differ by only a single digit that are easily transposed on the number pad. Unfortunately she likes to write bad checks, we have had her tax liens against our property and I'm sure we've paid a hospital bill or two unknowingly for her. We really have to watch our credit closely because of this.

      --
      Apocalypse Cancelled, Sorry, No Ticket Refunds
  4. SSN by CherniyVolk · · Score: 4, Insightful


    In the beginning the Social Security Number was issued by the government and is unique to each living citizen. This much still holds true.

    But what was lost somewhere via the effects of Capitalism.... was that this number was supposed to be private to the individual assigned it. And, while there are laws protecting a citizens privacy. Companies were granted positions to effectively counter such laws. Only the government, state or law-enforcement officials may "demand" your Social Security Number. Visa can not demand you give it to them. Your landlord can not demand you give it to him. Private schools by law, can not demand you forfeit such information.

    But no law is telling Visa or anyone else to accept alternate information for their personal records. As a result, you have to give out your Social Security Number, becuase if you don't, you can't apply for an Apartment, you can't buy a car, you can't have a credit card, you can't open a bank account, you can't get a job..... yeah, we have a choice.

    *Some places do accept alternate information such as Drivers License Numbers.*

    1. Re:SSN by Raindance · · Score: 2, Interesting

      Honestly... not that I'm a big fan of litigation, but this seems like a problem a high-profile lawsuit (regarding the needless identity-theft risk companies are exposing their users to) could fix. The market won't fix it, and if politicians haven't fixed it by now it's hard justify just waiting until a law comes along to outlaw it.

      Perhaps the EFF could step in.

    2. Re:SSN by Vellmont · · Score: 1


      Your landlord can not demand you give it to him.

      And your landlord doesn't have to give you a lease if you don't provide him with a SSN either. My landlord wanted all this crazy information about me. SSN, monthly income, drivers license #, my checking and savings account numbers. Way more information you'd ever need to do some very easy identify theft. He may not be a crook, but how do I know he keeps the information secure? How do I know no one he employees is a crook, or any future people he employees are crooks?

      I told the landlord to stuff it, no one needs to know my damn bank account numbers but me. He eventually agreed to let me rent from him, but he was under no obligation to do so.

      --
      AccountKiller
    3. Re:SSN by jackb_guppy · · Score: 1

      Then add in a company like TALX [http://www.talx.com/] that will publish your SSN and Bank Numbers in the name of cheaper payroll advices. Yes it saves money to our company, but did do mean to have all the information of employees of America's top 500 companies in one location with poor passwords??

    4. Re:SSN by Qzukk · · Score: 2, Interesting

      was that this number was supposed to be private to the individual assigned it.

      WRONG, and that's why this is a problem. The SSN was designed to identify you to the government for tax purposes. Everyone who reported your money to the government needs it: your employer, your bank, mortage officers, loan officers, casinos and so on and so forth. Someone stole your SSN? Oh noes! They can pay your taxes for you! The horror!

      It wasn't until other companies decided that they could use the SSN to identify you to them despite the fact that many, many people have access to these numbers that this became a problem.

      The solution is for the credit agencies to start feeling the bite. When lenders get a credit report from the agency that says that the crook they're dealing with isn't who the agency said they were, they should sic lawyers on the credit agencies when they end up with bad loans. A change in laws to force lenders to deal with the consequences of fucking up instead of allowing them to pursue the real person when they didn't bother to actually find out who they're giving money to will help also. Once this is in effect, the credit agencies will start to compete again, and improve based on accuracy. Lenders, too, will make sure the person receiving their money is who they say they are. I'm confident that captialism can come up with a solution for this one on it's own, we just have to stop protecting the lenders and credit agencies from their own stupidity so that Darwin can take care of the rest.

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
    5. Re:SSN by LordKronos · · Score: 1

      I told the landlord to stuff it, no one needs to know my damn bank account numbers but me.

      Did you pay your rent by check?

    6. Re:SSN by Acer500 · · Score: 1
      I know it is not a popular opinion, but I state it in these threads often anyway: get a real identification system like the rest of the world has and stop using the SSN which used to say "not for identification purposes".

      Nobody can ask for a credit card with my ID number alone in my country, it uses other forms of protection - photo and fingerprints plus some anti-faking measures, and before you say it's demeaning, or that it's not effective, think that it's the same system your country uses on everyone that lands in an airport (so you're either demeaning visitors, which I think you are, or by saying it doesn't work you're saying it's not effective as a tracking system).

      By the way, this has been discussed to death even here, see

      http://ask.slashdot.org/article.pl?sid=06/04/27/23 26258

      I like this comment for instance:

      by lelitsch (31136): Assuming you live in the US, you obviously don't have a social security number, drivers license, birth certificate, or passport, and you have never been sick, or attended school; and have yet to pay taxes? Newsflash: the government holds a lot of data about you. Unfortunately, the data is currently linked by an universal and extremly weak key, namely a 9 digit number that you probably have passed out many times over to people who are as trustworthy as used car salesmen. Come to think of it, more than a few probably were used car salesmen...
      --
      There are three kinds of lies: lies, damned lies, and statistics.
    7. Re:SSN by RexRhino · · Score: 4, Informative

      Only the government, state or law-enforcement officials may "demand" your Social Security Number.

      Completly false. Employers are REQUIRED BY LAW to take your social security number to handle SS deductions. Banks and credit card companies are REQUIRED BY LAW to retain your social security number in order to do financial reporting (so the IRS can check and make sure you aren't spending more than your reported earnings). Gun shops are REQUIRED BY LAW to take your social security number as part of criminal background checks. There are a whole slew of situations where, not only can a company ask you for your SSN, but they are required to take your SSN!

      Visa can not demand you give it to them.

      Visa IS REQUIRED BY LAW to take your social security number, or a tax ID number if it is a corporation, as part of their financial reporting requirments.

      Private schools by law, can not demand you forfeit such information.

      Private schools BY LAW ARE REQUIRED to take your SS number if the private school accepts federal government loans or grants for students.

      Don't try to obscure the blame that the government bears for your SSN being your ID number. Aside from the fact that they have made legislation making SSN the de-facto ID number (Real ID Act), it was the government that decided that you would have one single number that would follow you for the rest of your life as your unique identity (as opposed to the system they used for passports, where your passport is given a unique ID, but that number will change over the course of your life... your passport is assigned a number, not the person)

    8. Re:SSN by Anonymous Coward · · Score: 0

      Not a savings check.

    9. Re:SSN by spagetti_code · · Score: 3, Interesting
      As a foreigner who was working in the US for a number of months (all above board - my US based employer stationed me there) - I was forced to get by without a SSN.

      I had all sorts of issues including (a small sample):

      • having my VISA card rejected because it wasn't an "American" VISA
      • having my passport labelled a forgery at a bank because the date was 14/6/68. To quote the teller "there's no 14th month". Let me tell you - that creates an interesting scene in a busy bank.
      • being given checks by another bank, which were rejected by almost everyone because their starting number was too low. Then the bank cancelled them because of my lack of SSN.
      • the supermarket wouldn't let me use checks because I didn't have an SSN.
      • being offered a discount at the checkout on an expensive item if I signed up for a loyalty card. I said I didn't have an SSN. No problem they said. 30 minutes of head scratching and phone calls later, the checkout and manager and manager's manager gave up. Sorry they said. You need an SSN.

      Eventually I got a fake SSN from a website that has lists of unused SSNs and everything went a lot smoother.

    10. Re:SSN by jcr · · Score: 2, Informative

      In the beginning the Social Security Number was issued by the government and is unique to each living citizen. This much still holds true.

      Nope. There have been many cases of the SSA issuing blocks of numbers multiple times. SSN collisions happen every day.

      -jcr

      --
      The only title of honor that a tyrant can grant is "Enemy of the State."
    11. Re:SSN by NormalVisual · · Score: 2, Informative

      Gun shops are REQUIRED BY LAW to take your social security number as part of criminal background checks.

      Not true. There is a field for the SSN on a Form 4473, but it's not required that it be filled in.

      --
      Please stand clear of the doors, por favor mantenganse alejado de las puertas
    12. Re:SSN by NormalVisual · · Score: 2, Insightful

      being given checks by another bank, which were rejected by almost everyone because their starting number was too low

      Yup, and for the life of me I can't figure that one out. Every bank I've done business with has asked me what I wanted my starting check number to be, which makes the check number completely useless.

      --
      Please stand clear of the doors, por favor mantenganse alejado de las puertas
    13. Re:SSN by sakusha · · Score: 1
      Only the government, state or law-enforcement officials may "demand" your Social Security Number.

      No.

      Apparently everyone is overlooking the incredibly obvious reason why SSNs even exist. It is your SOCIAL SECURITY ACCOUNT NUMBER. Your employer MUST have your SSN, or it cannot send your Social Security tax withholding to the US Treasury, the number is used to direct those funds to your personal retirement benefits account. Additionally, it is your Taxpayer ID Number, so it is used for other tax withholding, which is reported to the IRS and your state tax office under that number.

      Of course, just because your employer is legally required to use your SSN in its internal accounting and payroll system, doesn't mean they have to use it for external ID purposes.
    14. Re:SSN by Eivind · · Score: 4, Insightful
      How about instead stopping the idiocy of confusing identification with authenthication ?

      A SSN is a perfectly fine and perfectly way to establish that we're talking about the same person. Names, adresses, birthdates whatever all break down here. (there is more than one "John Smith", there could even be more than one with the same birthdate, furthermore it's perfectly possible that "Ann Smith" is the same person as "Ann Kulstad", she could've married.)

      For this purpose, making certain that two records really refer to the same person, SSN is fine. A unique key that refers to an individual.

      Now, where you guys went wrong where in confusing this with authenthication.

      The very fact that you use your SSN to *identify* which person you're talking about means that lots of different organisations and individuals *MUST* know your SSN. That ain't a problem. The problem is in assuming that whoever is aware of your SSN *IS* you, or is authorized to order credit-cards in your name, or whatever else.

      We've got SSNs in Norway too. They're not particularily secret. The tax-people have them. Your employer has it. Your bank has it. They all even *need* to have it, to *identify* you. Your employer, for example, pays taxes, and uses your SSN when communicating with the tax-people so that it's clear for which individual these taxes are.

      But here's the rub: Knowing the SSN is never *ever* considered authentication. You cannot order a credit-card in someones name just by knowing it. Nor access their bank-account, or infact do *anything* you couldn't just aswell have done without it. Except for ONE thing: If you know the SSN, you can use it to refer to an individual, in such a way that all involved will know for sure precisely *which* individual you're talking about.

      The account is owned by individual X, the taxes are paid by individual X, the drivers-licence was issued to individual X, and we all (the bank, the employer, the drivers-license-people, etc) agree that this is infact one and the same individual, despite the fact that one of us spelled his name wrong, he has married, he has moved, and there's 17 other people with that precise name in Norway.

      *THAT* is the point of a SSN.

      You cannot at the same time give your SSN to dozens of different organisations (which you need to do if using it as an identificator shall work) and at the SAME time pretend that it's a secret that only the individual himself would ever know.

      I dunno why USA persists in the stupidity.

    15. Re:SSN by Alioth · · Score: 2, Informative

      I was in the same situation for a while (I ended up staying in the US rather longer, so in the end got a pukka SSN because I had to pay US taxes).

      However, not all banks are equal. The credit union at work absolutely refused to give me an account because they said they got fined if they gave accounts to people and didn't take their SSN. Bank of America, on the other hand, told me that was bullshit and had no problem in opening an account for me. All they wanted was a letter from my employer saying that I was indeed employed by them.

      As for checks - I never used them except to pay bills. I got a Visa debit card off my bank _straight off the bat_. They didn't want an SSN for that either.

    16. Re:SSN by Dexter+Alan+Ux · · Score: 0
      Banks and credit card companies are REQUIRED BY LAW to retain your social security number in order to do financial reporting (so the IRS can check and make sure you aren't spending more than your reported earnings).

      Citation please. Banks need it to report how much interest they're paying you. If you don't want to give them your SSN, then they withhold 20% of the interest and you have to file a tax return to get it back.

      Visa IS REQUIRED BY LAW to take your social security number,

      Must be a PATRIOT ACT thing, in which case it's understandable, but I am skeptical that they were always required to do to.

      --
      Cheney/Bush '08
    17. Re:SSN by Dexter+Alan+Ux · · Score: 0
      stop using the SSN which used to say "not for identification purposes".

      The "SSN" never said that. Ever.

      My *card* says that. In other words, you can't walk into the DMV, say "My name is John Smith", and when they say "prove it", flash 'em your social security card. The card does not constitute a government-issued ID card, and is not to be used as such.

      --
      Cheney/Bush '08
    18. Re:SSN by Neoprofin · · Score: 1

      It's optional, for the purpose of "preventing mistaken identities" honestly with all the other information you have to give them as well as being run through the NIC you may as well just give it to them, they already know more about you than you own mother.

    19. Re:SSN by swv3752 · · Score: 1

      The US is big and overall sparsely populated. The US has a fairly mobile society. There is no national ID card. We have individual states the size of Norway. California, one of the most populous states, has areas that are a 100 miles from nowhere. Many things like opening accounts at the bank are done by mail or internet. All of this leads to a big mess not easily so solved as it would be in a smaller country.

      --
      Just a Tuna in the Sea of Life
    20. Re:SSN by abb3w · · Score: 2, Funny

      having my passport labelled a forgery at a bank because the date was 14/6/68. To quote the teller "there's no 14th month". Let me tell you - that creates an interesting scene in a busy bank.

      Let me apologize for the increased restrictions on the ownership and use of firearms in the United States that have allowed an ignoramus so massive to continue to walk about.

      --
      //Information does not want to be free; it wants to breed.
    21. Re:SSN by Doctor+Faustus · · Score: 1

      Yup, and for the life of me I can't figure that one out. Every bank I've done business with has asked me what I wanted my starting check number to be, which makes the check number completely useless.
      It's probably just a programmatic way to avoid starter checks. Those usually start at something ridiculous like 1 or 101.

    22. Re:SSN by NormalVisual · · Score: 1

      If the credit union's offering was a combined checking/savings account (as mine is), then they would have to have the SSN in order to report the interest earned. If it was checking only where no interest could have been earned, then I agree that they had no need for it.

      --
      Please stand clear of the doors, por favor mantenganse alejado de las puertas
    23. Re:SSN by NormalVisual · · Score: 1

      with all the other information you have to give them as well as being run through the NIC you may as well just give it to them

      Except that the gun shop is required to keep the 4473 on file, and gun shops tend to be attractive burglary targets. I would imagine that anyone breaking in would be more interested in heisting the inventory rather than paperwork, but it's still safer to not have your SSN anywhere it doesn't absolutely have to be.

      --
      Please stand clear of the doors, por favor mantenganse alejado de las puertas
    24. Re:SSN by TheShrike · · Score: 1

      In the beginning the Social Security Number was issued by the government and is unique to each living citizen. This much still holds true.

      In the beginning, the SSN was used to locate the file drawer containing your file, which was then located by name in that drawer. There was no requirement for uniqueness, and it was not intended to be personal identifier at all.

      --

      --
      If R is the set of all sets which don't contain themselves, does R contain itself?
    25. Re:SSN by CherniyVolk · · Score: 1

      There are a whole slew of situations where, not only can a company ask you for your SSN, but they are required to take your SSN!

      I stand corrected.

      However, what laws, laws that are actively and vehemently enforced, or systems and measures are in place to invalidate the seemingly end-all-be-all of identification as the SSN, and for companies to protect those numbers exclusively with outrageous fines should they be leaked or the source for an identity compromise? None!

      As far as I'm concerned, it's meant to be private. I don't say this as a cover-up for my initial post being wrong. But, apparently, there is little regard and little for self-assurance and civil faith in protective measures ensuring our identity. Take the case of so much private information being put in the care of those non-citizens in a foriegn country. Some hospitals "out-source" documentation and record keeping of medical files to India... not exactly heart warming, and I really don't care how much so-called legislation they might have in their country. Governments must look after their own before anyone else, and I couldn't give two cents about information of some guy in Shanghai China if I had it in hand, no matter how "personal" it was.

    26. Re:SSN by oohshiny · · Score: 1

      having my passport labelled a forgery at a bank because the date was 14/6/68

      Well, labeling it as a "forgery" is a little strong, but they could label the issuing authority "idiots". Using the "/" notation is asking for trouble since it is known to be ambiguous.

      Your nation, like any other nation, should switch to ISO date notation in its official documents, at least those that are meant for international consumption.

      Failing that, as a practical matter, it should at least avoid the use of "/" with non-US style dates. (Don't tell me that it's "traditional" in your country, because if it is, then your country is responsible for creating this mess in the first place.)

      http://en.wikipedia.org/wiki/Calendar_date

    27. Re:SSN by oohshiny · · Score: 1

      A SSN is a perfectly fine and perfectly way to establish that we're talking about the same person.

      There could be a number like the SSN for this purpose, but the SSN was not designed for it and doesn't work well for it.

      I dunno why USA persists in the stupidity.

      There are two groups of people in the US: those that want a national ID number system and those that don't. They haven't been able to find a compromise. But what both groups agree on (and so do I) is that the SSN is not a good system for that purpose.

    28. Re:SSN by jedrek · · Score: 1

      People who can't figure out that other countries write dates in a different (LOGICAL) way shouldn't be allowed in banks, not to mention being allowed to work in them.

    29. Re:SSN by Neoprofin · · Score: 1

      Given the news these days I'm far more worried about the university, you wouldn't even have to steal it, just find a misplaced laptop.

    30. Re:SSN by Anonymous Coward · · Score: 0

      "There could be a number like the SSN for this purpose, but the SSN was not designed for it and doesn't work well for it."

      Why not? And what would work better?

      As others have noted any form of "number" will have the same problem. Lazy people.

    31. Re:SSN by telarus · · Score: 1

      You need to research exactly how the SS accounts work. I beleive that the treasury department has only one SS account, and all SS decutions from all paychecks go into the main treasury budget, then they vote on how much of that to throw into the SS Treausy account, and then every-one's SS checks get printed out from that account. Total Scam.

    32. Re:SSN by Web+Goddess · · Score: 1

      I have long been against this, primarily because my Grandmother railed about it, God bless her soul. The older generation does die out, the newer generation forgets the promises Government made. We are not to be assigned ID numbers like in the concentration camp! People were justly afraid of being identified by a permanent number. And they would only vote for Social Security, if they were assured the SSN was limited and private.

      They trusted their government. It is quite hopeful, the world was so naiive then.

      My Grandmother also railed against the toll on the Bay Bridge being reinstated. They PROMISED that when the bridge was "paid off" in 35 years, they would no longer charge a toll. And then what happened? Suffice it to say, Grandma is rolling in her grave.

      So, yes, we used to not be obliged to identify ourselves by permanent number, but now we are obliged. People do what authority tells them. We most of us know it's wrong, but the world does not consult with us... Anyone read They Thought They Were Free lately?

    33. Re:SSN by Eivind · · Score: 1
      The bigness is relevant, but not for any of the reasons you state.

      The problem is *political* not *technical*. The US is politically diverse, and has tons of states, all with individual politicians, lobbyists, special-interest-groups and ideas.

      It is *politically* difficult to agree on a single unified well-maintained register. It's not in the least technically difficult.

      Norway and other countries have had such registers since the 70ies, and frankly, handling a 300 million-record database with a total size of less than a single TB is not in any way shape or form a technological problem. Nor is handling the transaction-rates. Norway has on the order of 0.5 writes/year pro record and 50 reads/year pro record, which means USA would have on the order of 5 writes/second and on the order of 500 reads/second. Probably triple that in business-hours and near-zero in the nigth. Nevertheless, the challenge here ain't technical.

    34. Re:SSN by Anonymous Coward · · Score: 0

      If the American system operated with an understanding of the difference between identification and authentication, movies like The Net wouldn't make sense.

    35. Re:SSN by budgenator · · Score: 1

      well let's see the first 3 digits are area encoded, so that leaves 6 digits to cover 300,000,000, something tells me that SSN's aren't really unique. Unless I'm really missing something, anybody depending on the SSN to be a unique identifing number is going to be embarssed sooner or later.

      --
      Apocalypse Cancelled, Sorry, No Ticket Refunds
    36. Re:SSN by budgenator · · Score: 1

      check numbering isn't useless, it's a sequential numbering system to aid the user in maintaining his account register. Mine are sequenced accrost all of my checking account, when I change banks, the new checks start about 100 past the old bank's end number. This makes things real easy for me as intended, not easy for the clueless who erroneously assume something about the accounts age can be infered from the check numbers.

      --
      Apocalypse Cancelled, Sorry, No Ticket Refunds
    37. Re:SSN by ryanov · · Score: 1

      Useless for determining who's got a new account and who doesn't (and subsequently for deciding whose checks to accept), I believe the GP meant.

  5. Point out to your local normalization DBA by Marxist+Hacker+42 · · Score: 3, Interesting

    That SSNs are non-unique. They used to be, but thanks to illegal immigrants, ID theft, and a lot of other problems, SSNs simply aren't unique anymore, and thus are not a good identifier.

    --
    SJW: a person who perceives an injustice, and while correcting it, commits a greater injustice.
    1. Re:Point out to your local normalization DBA by MBCook · · Score: 2, Interesting

      Are SSNs of dead people later re-assigned? If not now, is there a guarantee that they won't do that later? With 300 million people alive now and all the people coming into this country and being born here, how long before they have to start recycling them, especially if they want to keep doing the first 3 digits showing where you were born part?

      --
      Comment forecast: Bits of genius surrounded by a sea of mediocrity.
    2. Re:Point out to your local normalization DBA by Planesdragon · · Score: 2, Informative

      Are SSNs of dead people later re-assigned?

      Not yet, but they will eventually. That or add another digit.

      Less than a century until we run out of our billion or so possible SSNs. Expect the next method to just have a new digit thrown in.

    3. Re:Point out to your local normalization DBA by pla · · Score: 2, Interesting
      Are SSNs of dead people later re-assigned? If not now, is there a guarantee that they won't do that later?

      Q20: Are Social Security numbers reused after a person dies?
      A: No. We do not reassign a Social Security number (SSN) after the number holder's death. Even though we have issued over 415 million SSNs so far, and we assign about 5 and one-half million new numbers a year, the current numbering system will provide us with enough new numbers for several generations into the future with no changes in the numbering system.

      However, an SSN has only nine digits - So the SSA will need to add a digit or three within then next few decades. Reissuing numbers, thanks to the exponential growth of the population, would only gain them a few years at most, so they probably won't do it (instead doing something like adding a new number group and moving all existing users to 000-###-##-####).


      Rather than use a dead person's number, though, might I suggest you use one of the classic non-numbers, such as any group all zeros (000-##-####, ###-00-####, ###-##-0000) (official) or 666-##-#### (unofficial, but as yet still never issued), or 078-05-1120 (the single most used fake SSN in history, which belongs to Hilda Whitcher, the secretary of an ad exec who decided to use her number in a promotion - She got a new one to replace it and the SSA retired it). A friend of mine had his used, just by coincidence, for something as mundane as a college ID, and you wouldn't believe the hoops he had to jump through just to register for classes. So don't make someone else's life hell, just carefully pick a totally invalid number.
    4. Re:Point out to your local normalization DBA by Marxist+Hacker+42 · · Score: 1

      I don't think they're doing the three digits showing where you were born part anymore now. 999,999 is far too small for our largest major cities now. And I bet they do get reassigned now- otherwise only 4 generations and we'll run out.

      --
      SJW: a person who perceives an injustice, and while correcting it, commits a greater injustice.
    5. Re:Point out to your local normalization DBA by MustardMan · · Score: 2, Informative

      However, an SSN has only nine digits - So the SSA will need to add a digit or three within then next few decades.

      10^9 = 1 billion possibilities. If the current system has used up 415 million, and SSNs are being added at a rate of 5.5 million a year.... that's around a hundred years to use up the remaining possibilities. I call that more than "a few decades"

    6. Re:Point out to your local normalization DBA by itwerx · · Score: 1

      first 3 digits showing where you were born

      They actually indicate the location of residence at the time of submission.
            I know this because my first three digits indicate the state of CA which is where I was living when I got my SSN but it is not where I was born. I had occasion to speak with an IRS employee at a later date and they confirmed.

    7. Re:Point out to your local normalization DBA by DeadChobi · · Score: 2, Informative

      I did the math on this for a math ed. class. It's about 110-130 years from now that we will run out, assuming the population maintains the same growth rate.

      --
      SRSLY.
    8. Re:Point out to your local normalization DBA by Propaganda13 · · Score: 1

      An invalid (or impossible) Social Security number (SSN) is one which has not yet been assigned.

      The SSN is divided as follows: the area number (first three digits), group number (fourth and fifth digits), and serial number (last four digits).
      From SSA.gov
      To determine if an SSN is invalid consider the following: No SSNs with an area number in the 800 or 900 series, or "000" area number, have been assigned. No SSNs with an area number above 772 have been assigned in the 700 series.

      No SSN's with a "00" group number or "0000" serial number have been assigned. No SSNs with an area number of "666" have been or will be assigned. Information about the SSN and SSNs that have been assigned is available on SSA's website at http://www.socialsecurity.gov/employer/highgroup.t xt

      How the first 3 numbers are assigned
      http://www.socialsecurity.gov/employer/stateweb.ht m
      NOTE: The same area, when shown more than once, means that certain numbers have been transferred from one State to another, or that an area has been divided for use among certain geographic locations.

      Immigration reform could also vastly change the number of SSNs used. Heritage.org estimated 100 million immigrants over 20 years based on the first draft of th CIRA and lowered that 66 million after an ammendment. The government had lower estimates for the same bill.

      Still we should have decades anyway. Adding a number to SSN would screw up the existing databases anyways, so would the government take additional steps? Possibly, two numbers - government use only and public use. Public Encryption keys? (highly doubtful I know) This type of thing could go hand in hand with National IDs.

    9. Re:Point out to your local normalization DBA by pboulang · · Score: 1
      Wait, you did this for a class and STILL couldn't come up with:
      (1000000000 - 415000000) / 5500000 = 106.36 years?

      *sigh*

      --

      This comment is guaranteed*

      *not guaranteed

    10. Re:Point out to your local normalization DBA by miskatonic+alumnus · · Score: 1

      That is assuming that each combination is available for use --- which is completely false. The numbers aren't assigned in increasing order, they contain fields whose values are in a certain range. This reduces the number of available SSN's.

    11. Re:Point out to your local normalization DBA by pla · · Score: 1

      10^9 = 1 billion possibilities.

      As I mentioned, you have quite a few invalid numbers... The ones I mentioned alone drop that down by 12,100,001. Also, several other "valid" ranges have closed, such as the 700-733 range for railroad workers, despite that range not having come even close to fully used. Then 800 to 999 also count as invalid (you have 200 million numbers wasted right there).



      SSNs are being added at a rate of 5.5 million a year.... that's around a hundred years to use up the remaining possibilities. I call that more than "a few decades"

      Don't forget that rate itself grows at roughly 1.3% per year (at least it did, on average, from the 1990 to the 2000 census). Compounding that, and taking those excluded ranges into consideration, we'll run out of numbers at the current rate of population growth in just under 43 years (R=5.5M; G=1.013; X=767M-450M=317M; sum[i=1->43](R*(G^i))=323,775,738; 323M > 317M).



      So, if you take "a few" as literally three, then yes, my original statement underestimates somewhat. But it will happen within our expected lifetimes.

    12. Re:Point out to your local normalization DBA by DeadChobi · · Score: 1

      I don't understand where you're getting the numbers for your mathematics or what kind of model you're using. I used exponential growth and a range of populations nabbed from the census. 106 is really close to 110, so either one works for me.

      --
      SRSLY.
    13. Re:Point out to your local normalization DBA by pboulang · · Score: 1

      I'm saying with CONSTANT usage, with the full set available will be 106 years. If you are accounting for a growth rate, and there are obviously invalid sets (like those that have groups of all 000) that can only serve to shorten the time to exhaustion. (Oh and sibling post points out another 20% that is effectively unused) My thought was how the heck could you come up with MORE? I assume you started with with a lower current burn rate to get your numbers, and this is a simple PERT problem, but it made me scratch my head and laugh anyways ;) It's all good. I'm easily amused.

      --

      This comment is guaranteed*

      *not guaranteed

    14. Re:Point out to your local normalization DBA by DeadChobi · · Score: 1

      Yeah, actually I assumed that all the numbers will eventually be allocated and that we recycle numbers upon the death of the previous owner. I think our calculations and assumptions must be very different.

      --
      SRSLY.
  6. Thought it was actually illegal by kbob88 · · Score: 3, Informative
    I used to work in the IT department of a managed care company in the early 90s, and seem to remember something about it actually being illegal to use the Social Security Number for any other purpose (than running Social Security and the IRS). Of course, we (and every else in healthcare) still used it as a primary numbering/identification scheme. Not sure if the illegality was true or not.

    From the Social Security Administration:
    • "[Makes] misuse of the SSN for any purpose a violation of the Social Security Act"
    • "Unlawful disclosure or compelling disclosure of the SSN of any person a felony, punishable by fine and/or imprisonment."
  7. even more outrageous by Aeron65432 · · Score: 2, Interesting
    I am a student at Tulane University in New Orleans, Louisiana, and we use our social security numbers as STUDENT ID's.


    It appalls me how irresponsible this is. I have to write out my social security number down for the desk worker if I lock myself out of my room, to log-in to view my classes and grades, and all the time online to manage my account.


    I cannot believe that such a highly accalimed university promotes such reckless actions. SSN's are basically our national ID number, and the fact that I have to throw it around all the time scares me.

    1. Re:even more outrageous by hurfy · · Score: 1

      dang, i was a little distrubed when the community college did this 20+ years ago! I would have thought that went out of fashion by now :(

    2. Re:even more outrageous by Anonymous Coward · · Score: 1

      I am a student at Cal Poly, San Luis Obispo in California, and we also are forced to use our ssn's as student ID's. I think the whole Cal State college system (27 schools) uses this practice. How hard would it be to assign random student ID's?

      My accounting professors seem to think our ssn's make good "digital signatures", and ask us to put them on our assignments in Excel as a signature saying the work is ours, and ours alone. I've abstained so far without raising any questions.

    3. Re:even more outrageous by Vellmont · · Score: 1

      I had the same experience at the Univ of Wisconsin Madison when I started in 1990. They used the SSN+1 digit as a student ID. I think it was the last digit that was the student ID. Hopefully they've eliminated that practice by now.

      --
      AccountKiller
    4. Re:even more outrageous by jackb_guppy · · Score: 1

      Ask them to change it. We just did with our 2 daughters and 3rd just signed up without SSN.

    5. Re:even more outrageous by anakin876 · · Score: 1

      BYU used to do this - they just changed a few years ago. Right before the change went through an advertiser they had sold the list of graduates to printed out address labels that included name, address and SSN. Fortunately they weren't used - but DUH what a terrible idea.

    6. Re:even more outrageous by Anonymous Coward · · Score: 0

      It isn't like this at Cal State LA, as of around 2004, they used to do that though.

    7. Re:even more outrageous by niney · · Score: 1

      It was pretty bad when my college gave out email accounts a while back. They used a digit, your initials, and the last four digits of your SSN as your username. So careless...

    8. Re:even more outrageous by Anonymous Coward · · Score: 0

      It was only a few years ago that Hawaii stopped using SSNs as the drivers license number.

    9. Re:even more outrageous by Guru2Newbie · · Score: 1

      I worked on staff at a University of California campus. In about 2001, all the students were issued unique SID (Student ID) numbers; the staff got new ones as well, replacing all usage of SSNs. Of course, there had to be a few cross-reference databases for the students that left/graduated before they could be issued new SIDs. It made things interesting.

    10. Re:even more outrageous by donutz · · Score: 1

      I think the whole Cal State college system (27 schools) uses this practice. How hard would it be to assign random student ID's?

      I don't know what prior practices were at Cal State Fullerton, but when I applied earlier this year, I was given a generated ID number, so at least that school doesn't (at least for new students?) use SSN as an ID number.

  8. Not as bad by Propaganda13 · · Score: 1

    My company is definitely not that bad, but SSN is still used on certain internal documents that really don't need the SSN and should just have the employee ID number instead.

    The wrong way to speed up the process - post SSN of your CEO and higher management on the web or even sell them.

    Do some research. See if there are any lawsuits holding companies responsible. Check for hard info on identity theft. Express your concerns to management in a documented fashion. If you can involve lawyers, HR, and the right management, the process could be sped up. If it isn't then you have documented steps that you took to clear up the issue before problems happened.

    1. Re:Not as bad by Anonymous Coward · · Score: 0

      and get fired...you're now a hero!

  9. Universities by Anonymous Coward · · Score: 0

    I go to a public university in Indiana and they are in the process of phasing out SSN's as your ID number. Starting with the people who are currently seniors they began issuing dual ID numbers (both a 10 digit and 9 digit SSN were valid), the year after that SSN use was discouraged, my freshman year only use of 10 digit ID was officially sanctioned but SSN still saw occaisional use, but I havn't been asked for anything but my 10 digit ID number all year.

  10. You might be surprised... by BenEnglishAtHome · · Score: 4, Interesting

    ...that my employer, a place flat-out driven by SSNs in many aspects of our work, wouldn't think of using them for anything internal that isn't mandated by law. We issue to everyone a 5-character ID that's used for signons and all sorts of IDs. We used to use a contraction of the user name, but even that has been 95% phased out for years.

    It's not that difficult to quit using SSNs and it's just good policy. I'm surprised that they are still so commonly used in situations where they might be disclosed to anyone but the person to whom it belongs.

    1. Re:You might be surprised... by Teancum · · Score: 1

      I contend that they ought to be disclosed to anybody and everybody, because the SSN should not be used to establish identity other than to prove that you are a unique individual in the USA. It ought to be no more sacred than your telephone number, which is published in public directories. Why not the SSN?

      It is how the SSN is being misued by banks, and other agencies when it is not what it was established to be used for.

  11. What about the Military? by Foo2rama · · Score: 1

    I always wondered about this with the SSN's on dog tags.

    --


    ---In a time of Chimpanzees I was a Monkey.
    1. Re:What about the Military? by Quixotic241 · · Score: 1

      The military uses SSNs for everything. Remember the stolen VA laptop?

    2. Re:What about the Military? by John+Hasler · · Score: 1

      The Department of Veteran's Affairs is completely seperate from the Department of Defense.

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    3. Re:What about the Military? by Anonymous Coward · · Score: 0

      As an ex-member of the military, I can tell you they got explicit permission to use the SSN as the military ID number as part of the Privacy Act of 1976. Further, every military document that required that ID number had a section of the Privacy Act of 1976 on the back of it specifically stating they had permission to use the SSN that way (but not for other uses)

    4. Re:What about the Military? by crystalattice · · Score: 1

      The military uses SSNs for everything, though official paperwork has the privacy act of 1974 on it. Not that it means much to people anymore; it's mostly there to tell people whether the disclosure of their SSN is voluntary or not. Even if it's voluntary, it goes on to tell you (very often) that non-disclosure could invalidate the document or keep you from receiving benefits.

      There was a scandal last year or so about the disbursing clerks on a ship who essentially stole nearly everyone's SSN onboard and used them in identity theft schemes. I don't remember the fallout but they were prosecuted.

      I'm really surprised it doesn't happen more often. AAMOF, just a few weeks ago a spreadsheet was inadvertently sent out to the contractors in my command that listed every contractor's SSN; it was supposed to go to only the contractor management but someone accidently added the contractor mail group. I never heard anything come of that incident.

      --
      Free Programming BookLearn to program
  12. USPS still uses em by DrMrLordX · · Score: 2, Interesting

    I work for the US Post Office at a REC site. We still use parts of our SSN for identification. I don't really want to elabourate, but anyone who wished to steal SSNs there could easily do so.

  13. RS and BOA by Malevolyn · · Score: 1

    Radio Shack still uses them to do employee discounts and certifications. Bank of America uses them to login to online banking.

    --
    Your ad here.
    1. Re:RS and BOA by Anonymous Coward · · Score: 0

      Actually Radioshack has a discount card available on there employee site that uses a random number or something like that. It is just no one uses them. The system will take any number in it. I rang in a sale tonight and reversed my employees number by mistake and it still excepted it.

    2. Re:RS and BOA by Anonymous Coward · · Score: 0

      I use bofa online (California) and I never have to enter my SSN... just a portion of my debt card number and a password, that's it.

    3. Re:RS and BOA by ankie · · Score: 1

      Anyone who has SSN as the online ID with BoA has the right to change it under the customer service tab; this now becomes the user's responsibility for not having SSN as the login ID. And when new accounts are opened now, it no longer defaults to SSN for the online banking ID. So the company is making efforts to get away from SSN for the online activity.

    4. Re:RS and BOA by Anonymous Coward · · Score: 0

      Ummm, not really. Bank of America online banking was enhanced several years ago to allow you to pick your own 9 digit login, thankfully. Now, whether or not most online users _know_ this fact or would take the time to actually _use_ it is another question (apparently many don't).

  14. Leak by bergeron76 · · Score: 1

    what can be done to speed the process up?

    Leak it.

    --
    Don't think that a small group of dedicated individuals can't change the world. It's the only thing that ever has.
  15. What happens if someone publishes all SSNs? by defile · · Score: 1

    It's only a matter of time before someone gets their hands on the SSN:name database and posts it for all to see.

    What the fuck happens then?

  16. Old Employer 8 years ago by Associate · · Score: 2, Funny

    We were required to give the last four digits of our SSN to get in the gate. Their verification was someone sitting on the otherside of the gate call box with a list of everyone's SSN. I expressed some concerns to my supervisor at the time because I didn't really trust my coworkers. Stupid bitch ran and told our manager that I was going to refuse to give it. She came back and told me that I could be fired for not following the procedure.
    That said, Larry Wise's last four SSN numbers are 2795.

    --
    Someone hates these cans.
  17. Solution by Alchemar · · Score: 1

    I was talking about this at earlier today, because it is of great concern to me. I think I have the start of a solution:

    There needs to be a way to uniquely identify someone, and verify that identity. What does not need to be done is make that id public. That is the whole point of PGP encryption. An national ID number needs to be assigned. I hate the thought, but I finally gave in that it is a necessity. We already have a SSN, so it isn't something new. It just needs to be seperate from your SSN. In fact the plan I have, would allow your national ID to still be used for your SSN, and still be seperate from every other business or goverment department.

    Set up a goverment department whose entire job is to administer ID numbers. The only information they should have is Name and age. They isssue everyone a private ID number and and encryption calculator. With the price of handheld calculators, I am confident that it can be done at a very reasonable cost. The department will then issue an ID number to each business that may need to know your ID. When a business or goverment agency wants your ID, they must give you their ID number, you encrypt your number with their ID number and give them the results, they then send that encrypted number to the Department of Identification along with their number where it is looked up on a database and the company is only given your Name and age group i.e. Under 16, 16-18, under 21, or over 65, depending on why the needed to register for an ID request. An adult site can request an 18 or over check, a convience store would need to know Under 18 for cigeretts, or under 21 for beer, etc, etc. Since each company that needs your information would have a different number to Id you with, it would prevent massive datamining into your life.

    1. Re:Solution by iggymanz · · Score: 1

      or we could have a society in which the government can't id or track people at all. They only check that x number of unique people voted in the last election, maybe by retina scan or whatever. If someone gets arrested they get a temporary tracking which only lasts until conviction or acquittal/release. No income tax in such a world, obviously.

    2. Re:Solution by Anonymous Coward · · Score: 0
      An national ID number needs to be assigned.

      Fuck you right in the heart, you pusillanimous Stalinist bastard.

    3. Re:Solution by Alchemar · · Score: 1

      As long as you have it put in the law that every goverment department has to use a seperate key, then it becomes usless for most tracking. Each department could track within itself, but if you want to have fun. Make them get a new requester ID every year. Now all they can do is name/age matches. That is what I liked about the idea so much.

    4. Re:Solution by Alchemar · · Score: 1

      If you live in the US, you have a SSN, drivers license, phone number, address, "name & birthday", and an FBI file that most people wouldn't believe. I've had to deal with the FBI, they keep records on who your first girlfriend was, I have been denied a place to live because the FBI told the landlord that I was antigoverment because I play role-playing games. They went and asked the father of the landlord's first girlfriend about him. What I want is an ID system that the people control not the goverment. I think that a goverment agency need to keep the records with strict laws about who they can share them with, mainly because of the current trend that the Bill of Rights only applies to the goverment and not corporations. Try setting up a new life without giving anyone your ID. No house, no car, no work, no school. I can't even get into the school to see a kids play without getting my ID faxed to the police station to make sure I am not a child predetor. If they are going to have ID cards, I want a record of who ran the ID and for what, and do everything I can to prevent people from linking the information between companies and goverments. What is your plan for a solution? or are you happy with the fascist goverment we have now?

    5. Re:Solution by Anonymous Coward · · Score: 0

      A unique identifier with a one-way process to verify it is exactly what's needed, and wouldn't be any harder or more expensive to implement than the current crappy system. The private sector could combine centralized ID verification with all of the credit, background, etc. type stuff done in the real world to really simplify things.

      Your idea is only missing one element to keep politicians from turning it into an orwellian nightmare: OPT-OUT.

      There are many people who are not in the tin-foil-hat or mark-of-the-beast crowd but who still don't want or need big brother's help in proving their identity. If you are so rich or so poor that you don't participate in credit, employment, etc. and deal with the world on a cash-and-carry basis, you should be able to opt out of the big verification database and take your chances.

      You'd be suprised how many people live on a cash-and-carry basis, even with their doctors and other big-ticket items. Their SSN doesn't appear anywhere until they pay their taxes and die. Not even then in some cases.

    6. Re:Solution by kent_eh · · Score: 1

      Since each company that needs your information would have a different number to Id you with, it would prevent massive datamining into your life.

      Which, of course, means that they will do everything in their power (and in the power of whatever politicians that they own) to make it not happen.

      Those same companies want to be able to datamine your life to a greater extent than they do now.
      Their concern about your privacy is "less than none".

      --

      ---
      "I can't complain, but sometimes still do..." Joe Walsh
    7. Re:Solution by Alchemar · · Score: 1

      I don't think any of the companies out there care about your privacy directly, but a lot of companies are losing a lot of money because of the problem with the current system. I think they will do everything in their power to make it a system that they can track everything for financial gain, but I am hoping that people will wake up, and that there are enough votes cast in favor of throwing out the current dictator that he will be unable to compensate with voter fraud. When the new party takes office, I am hoping that they will listen to the people enough that instead of just bowing down to corprate intrest they will find a compromise. I think there is still only a snowball chance in hell of getting something functional out of the goverment, but I think something like a one way system would be benificial and will do my best to let other people start to think about it.

    8. Re:Solution by infolib · · Score: 1

      they then send that encrypted number to the Department of Identification along with their number where it is looked up on a database and the company is only given your Name and age group

      So now the DoI has a long list of your every attempt at being certified for something - buying booze, viewing adult movies and other heathen activities. Who do you trust with that list? (Or do you really believe it will not somehow be rolled into the no fly list system?)

      The current system sucks, but at least there is no centralized master database of all your activity.

      --
      Any sufficiently advanced libertarian utopia is indistinguishable from government.
    9. Re:Solution by Teancum · · Score: 1

      Which dictator is that? HRM Queen Elizabeth II? The Illuminati? Council of 500?

      What party to come to power? The National Fisherman's Party? The Pirate Party?

      I don't think any of this is ever going to be meaningful change in the USA unless there is a major shakeup of congress by people outside of the two major political parties, but as you so eloquently stated, that has a snowball's chance on the sixth level of hell. Otherwise throwing out the current President of the USA is only going to replace him (in less than 3 years regardless of whatever else happens) with another idiot who is going to continue essentially the same policies. Especially in regards to the current economic system that rewards the current people in political and economic power in the USA.

    10. Re:Solution by Alchemar · · Score: 1

      1) Leaving a name off the dictator was intentional, Plausable deniablility and all that.

      2) Leaving the "party" blank was also intentional, because I don't think that either of the two major options is a real option. I am hoping that we end up with enough 3rd party and independents that they band together and can get the Democrates to help, I'll let them. Anything is better than what we have now.

    11. Re:Solution by John+Hasler · · Score: 1

      > There needs to be a way to uniquely identify someone...

      Why?

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    12. Re:Solution by Anonymous Coward · · Score: 0

      No, you're confusing identification with authentication. See earlier reply thread on that topic and then get back to us.

    13. Re:Solution by TheGreek · · Score: 1
      I can't even get into the school to see a kids play without getting my ID faxed to the police station to make sure I am not a child predetor.
      Maybe you should clean yourself up a little, Rasputin.
  18. Timeclock passwords. by Kate6 · · Score: 1

    My company uses SSN's as our passwords for logging into our timeclock application through our web browsers. While the connection is behind our firewall, it's not SSL-encrypted... And I have no idea how the SSN/passwords are actually stored. Only been working there for 3.5 months so far, but have felt uncomfortable about it from day 1.

  19. Very selective disclosure by kf4lhp · · Score: 1

    The University I work for has very limited disclosure of SSNs, and has system-wide been cracking down on the users of them - justify the need, or get rid of them. And if you have them, then your systems get to undergo more frequent and in-depth security audits.

    The College I attend uses an 8-digit serial number which is linked across to the SSN for student identification, but they can still use your SSN if you don't know the other number.

    I think the biggest point is that I don't want someone (even me) to be able to see the SSNs of others, but being able to search against them is very helpful, especially when dealing with new students who haven't a clue what their university ID number(s) are.

    1. Re:Very selective disclosure by Anonymous Coward · · Score: 0
      I think the biggest point is that I don't want someone (even me) to be able to see the SSNs of others, but being able to search against them is very helpful, especially when dealing with new students who haven't a clue what their university ID number(s) are.

      Then send the little shits back home. If they can't find an obscure way to keep a single number in their wallet, on the wall at home next to their phone, in their phone book as the phone number of Aunt IDa, then they should be sent back at least to high school.

  20. re: getting the results you want by Gybrwe666 · · Score: 1

    First off, one of the biggest telco's in the US used, at least the last time I checked, about two years ago, the last four digits of their employees' SSN's as *EMAIL* addresses. Emails were initials followed by the last four. Sad and pathetic...

    However, if this is truly something you want to see changed, it might be worth calling around to a local reporter or television stations and seeing if you can hook a reporter on the idea of getting a good story out of this. Privacy concerns these days are no laughing matter and I've found recently that sometimes corporations have individuals in them with good intentions but beauracracy and inertia make it difficult for even some of the highest placed individuals to effect real change.

    And just think about how exciting it would be to the the "Anonymous Source" in a nice little news story...

  21. Even simpler by JimXugle · · Score: 1, Interesting

    Or do credit checks on him and let them slip into the fax machine when it's set to auto-dial the NY Times, Washington Post, His Wife, Misteress, and several corporate leadership figures in the company.

    --
    -jX

    Don't you just love politics? It's like a comedy of errors.
  22. My university still does. by deezilmsu · · Score: 1

    In fact, all the roll sheets distributed to professors (and handled by 2-5 people before it hits their hands) have the last 4 of our SSN on it, and it's used as a main identifier for students.

    --
    It's not that I'm asking the big questions, it's that I'm asking lots of small ones.
  23. Photo IDs by Anonymous Coward · · Score: 0
    I've never had a company actually ask to see my Social Security Card, but more than a few want to make a photocopy or scan of the picture ID from my drivers license.

    Companies don't really seem to care whether their FICA contribution actually goes to the right person or not -- maybe they get their payment amounts returned later, for the bogus SSNs.

  24. SSNs? by JohnWiney · · Score: 4, Funny

    My employer doesn't, because none of his employees has an SSN.

  25. Relational Database by MikeB0Lton · · Score: 1

    Usually the SSN is the PK in a relational db. It isn't hard to assign arbitrary account/user/customer numbers to those records, and replace the SSN in other tables with that number (assuming you have cascading updates). If the SSN is necessary for business, it should be stored without relationships to other tables. Of course this usually requires your program to be edited...

    1. Re:Relational Database by Anonymous Coward · · Score: 0

      Thats a pretty bad idea... Eventually the SSN will be reformatted, have digits added, or be otherwise changed. You shouldn't use something that has the possibility of changing as a PK, unless you want to risk Y2K-like rewrites of your code.

      -G

  26. You have the choice... by JSThePatriot · · Score: 1

    Starting from the point the government decided SSN's were how they were going to track us financially you have had the choice on whether or not that number is used anywhere else. If they have automatically used your SSN without your permission, then I would send them a Certified Letter stating that you do not want to use your SSN in their IT Ticketing system, they will have to change it or face the law themselves.

    I dont know where to find these laws, but you could certainly contact a lawyer that is familiar with SS, and he/she would be able to help you promptly.

    JS

  27. My old company used last-4 SSNs by Anonymous Coward · · Score: 0

    Just a point of information, I used to work for a large regional telco (whose slogan could have been "a new *Frontier* for all *Citizens* and their *Communications*", but I digress...) who used the last 4 of SSN for identity confirmation when calling customer support, including password resets. For a 6000-employee company.

    1. Re:My old company used last-4 SSNs by jesboat · · Score: 1

      Sprint?

    2. Re:My old company used last-4 SSNs by Anonymous Coward · · Score: 0

      I think s/he means that the company name is inside the asterisks.

  28. and just to show what can happen... by phageman · · Score: 2, Informative

    I'm a high school teacher in Kentucky. Yesterday, every teacher in the state got an email informing us that letters sent to our homes inadvertently displayed our SSN through the address window!!! Anyone could have swiped the numbers just by looking at the envelope. I'm not worried myself (my credit is so bad I hope someone will steal my identity), but just imagine if some unscrupulous postal employee noticed thousands of SSNs in plain view.

    1. Re:and just to show what can happen... by T-Ranger · · Score: 1

      The postal workers arn't done working the way through 1972 series of Playboys

    2. Re:and just to show what can happen... by mjs0 · · Score: 2, Informative

      Not trying to scare anyone here...but...my wife works in this field (no not stealing identities, helping people resolve issues arising from stolen identities!) and unfortunately it is not just about your credit. If someone gets hold of your SSN together with your name they can 'become you' in many different ways.

      One of the scariest things is when your number gets used for reporting income by many people. Even if income tax is withheld on the wages of these imposters guess what happens when you work 20 different $20,000 per year jobs...you end up in the top tax bracket, and of course it looks like you've take the standard deduction 20 times. Guess who the IRS comes after to get all those extra taxes...the actual owner of the SSN of course.

      Oh and imagine what happens when someone gets your SSN and other info then applies for a driver's license in your name. Maybe 6 months later you get pulled over for a routine stop and dragged to jail for non-payment of speeding fines or even worse crimes.

      Are any of these likely, no...but as with all matters of probability unlikely does not mean never...it does happen to somebody.

      And on the topic of companies using SSNs for non-essential situations...someone in that organization needs to look at a few recent laws regarding the correct handling of NPI (non-public information) such as:

  29. Good thing federal law prevents that. by BKX · · Score: 4, Interesting

    Or at least allows you to. All universities and colleges MUST allow you to change your student ID to something other than your SSN if you ask (and are encouraged to not use SSNs anyway, though not required). It's federal law (a law passed about five years ago, I beleive). Ask and you shall receive. If you don't, sue and you shall receive even more.

  30. crazy by CheeseTroll · · Score: 1

    Using an SSN for an IT ticketing system? What do they do, run a credit check before unlocking a user's account?

    --
    A post a day keeps productivity at bay.
  31. i'm a victim by feld · · Score: 3, Informative

    i live in WI and someone in Milwaukee (with many, many previous addresses) is reporting my SS. I have no idea how or where they are reporting it, but they're in the database with my #. They have never used it for financial things yet, though, so my credit is fine. I reported this to the cops several times but they won't do anything about it because they arent using it for credit related things. This pisses me off to no end.

    I have the original SS card in its original envelope from 2 months after I was born.

    I had a hard time explaining things to employers when I was a teenager because they'd do checks of some sort and find this other guy's name.... notably Radio Shack and Menards (Like Home Depot) were the main ones causing problems over it.

    1. Re:i'm a victim by jcr · · Score: 2, Informative

      Not necessarily a single person. Many illegal aliens will pick a random set of digits, and they'll share numbers that work. Depending on the employer, they may need to change numbers annuallly.

      -jcr

      --
      The only title of honor that a tyrant can grant is "Enemy of the State."
    2. Re:i'm a victim by Anonymous Coward · · Score: 0

      I'd think there'd be some law that would penalize falsifying something like a SSN - have you talked to the SSA about this yet? http://www.ssa.gov/

  32. Individual Unique ID by JoeCommodore · · Score: 1

    Thats what it means to many programmers (and creditors), of all the things a person has on them - thier SSN is unique (not totally, there have been mention of dupes - though no accounts I could verify).

    It's not a problem if you are dealing with one location or a small set of locations, but if you deal with state-wide or federal data it gets to be an issue to have a good unique ID for everyone.

    The idea of a national ID would be an alternative (as SSNs go up to 999,999,999 we are running out). ANother would be biometrics but those are from what I hear at least 512 bytes for a fingerprint metric and higher for others.

    Though I don't think it was a problem until private-sector creditors picked it up as thier de-facto key unique ID for financial identity, and when or if the national ID comes out I am sure the banks will adopt that too and keep the system screwed up.

    --
    "Enjoy what you're doing! If it becomes drudgery, you're doing it wrong!" - Jim Butterfield
  33. You're looking at it from the wrong direction by Michael+Woodhams · · Score: 2, Informative

    The problem isn't that people can find out your SSN.

    The problem is that banks etc. use knowledge of SSN for authentication. If someone accumulates debt in your name, based only on their knowledge of your SSN and other readily available data (DOB, mother's maiden name) then you should be able to simply disown those debts, sticking the problem back on the people who accepted inadequate ID.

    --
    Quattuor res in hoc mundo sanctae sunt: libri, liberi, libertas et liberalitas.
    1. Re:You're looking at it from the wrong direction by dowobeha · · Score: 1

      Quattuor res in hoc mundo sanctae sunt: libri, liberi, libertas et liberalitas.

      Translation? :)

      --
      I am concerned about any program, any piece of hardware, any treaty, any law that treats me as a consumer, not a citizen
    2. Re:You're looking at it from the wrong direction by Michael+Woodhams · · Score: 1

      Four things in this world are sacred: books, children, freedom and generosity.

      Painfully worked out by me, using my very rudimentary Latin. My /. journal collects other Latin /.sigs, with translations (or feeble attempts at translation.)

      --
      Quattuor res in hoc mundo sanctae sunt: libri, liberi, libertas et liberalitas.
  34. Florida State University by SinGunner · · Score: 1

    When I worked for FSU, to login to our timeclocks we had to enter the last 4 digits or our SSN, but we entered them BACKWARDS. The thing is, everyone knew we entered them backwards... I couldn't quite figure out the point. Were they trying to point out that the policy itself was backwards?

  35. Excellent information about SSNs and privacy by flieghund · · Score: 1

    From the Privacy Rights Clearinghouse: Your Social Security Number: How Secure Is It?

    --
    "I came here to kick ass and chew bubblegum. I'm all out of bubblegum." MSE USC APX AIA CSI CASp
  36. Easy by Anonymous Coward · · Score: 0

    1. Leak SSN Name databse
    2. ???
    3. Profit

  37. Funny or Interesting? by loteck · · Score: 1
    I realize why this was modded funny, but I wonder if the parent was meant to be funny.

    the only reason I ask is because I know of several US Citizens that don't have SSNs.

    After all, there's no law saying you have to have one.

    1. Re:Funny or Interesting? by Teancum · · Score: 1

      However, there is a law that says that every employee involved in a business that conducts "interstate commerce" (that is about as vague as it comes) must file with the IRS and report the income payed to all of its employees. That is about 99% of all businesses in the USA, BTW, as even a burger store, locally owned and not even a franchise of a larger chain, is conducting "interstate commerce" if somebody from another state can potentially buy one of their hamburgers. Filing with the IRS requires the SSN.

      About the only place that is excempt is a small family-owned farm, provided they don't sell their products to anyone but a local wholesale distributor. Even then, they could still get tripped up by the interstate commerce provisions. But farm laborers are notorious for avoiding income taxes and havens for illegal immigrants as a result.

      The other way to avoid having an SSN is to be so filthy rich independently that you don't need to work. Of course, you can't have any of your money in a bank either, as you need the SSN (again for tax reasons) to open the bank account.

      I didn't get my SSN until I was 16 years old (when I started to apply for jobs in the workforce), but apparently that is a huge exception today. I was coerced by the hospital to get SSNs for all of my children on the very day they were born, and that is also very common practice today in the USA.

    2. Re:Funny or Interesting? by loteck · · Score: 1
      Of course, you can't have any of your money in a bank either, as you need the SSN (again for tax reasons) to open the bank account.

      this is not necessarily true.

    3. Re:Funny or Interesting? by Teancum · · Score: 1

      If it is an interest bearing account that is deposited in a bank insured by the FDIC, yes it is. The interest income is reported to the IRS. As are almost all checking accounts, especially with post 9/11 issues.

      I suppose you can find some accounts that are not tied to the federal reporting statues, but those would not be the typical accounts that are offered by any banks that are federally or state chartered.

      Of course, if the bank you are talking about is "off shore" that is a different issue altogether, but then you are essentially living outside of the USA and not within the American economy. That is the point. And the USA isn't the only country to ask for some identification number similar to the SSN to determine unique identities.

      There really isn't an easy way for an ordinary American to avoid getting the SSN, even though technically you might be correct that it isn't specifically required by law. There are also vagrancy laws that will end up landing you in jail in all but the largest cities of the USA if you are without money or place to live.

      You can't participate and get involved with the "legitimate" national economy of the USA without having a SSN except under the most extreme circumstances. Remember, Al Capone was arrested for tax evation, not smuggling alcohol.

    4. Re:Funny or Interesting? by Anonymous Coward · · Score: 0

      The reason your children need SSNs is so that you can claim them as dependents and get a tax deduction. The year that the IRS started requiring SSNs, millions of children disappeared.

      If you don't want to claim the deduction, you can probably get away without getting your children SSNs until maybe you try to get them health insurance or something.

      dom

    5. Re:Funny or Interesting? by Teancum · · Score: 1

      The SSN is tied so deeply and the incentives such as massive tax deductions for people of modest income so large, that to not apply for an SSN for my infant children now has a social stimatism that reeks of fanatical behavior, and is likely to get my children taken from me by government officials under the guise of "protecting the innocent", likely by some child welfare "expert" who thinks your fanaticism regarding staying out of the system is a sign of a deranged mind and an indication you are somehow harming your kids in some other manner.

      That also misses the point here, that my children have absolutely no say what so ever about if they wanted the SSN or not. They were less than a day old when I applied for crying out loud, and the most important thing they had to deal with at the time was trying to figure out how to eat and cry, and perhaps deficate. Debating the merits of having a SSN was certainly not on their mind at the time. And the government is encouraging this abuse so strongly that it might as well be manditory.

  38. SSN equivalent public in some countries by Anonymous Coward · · Score: 2, Informative

    In some countries the SSN-equivalents are public and not excpected to be a secret usable to prove your identity. E g in Sweden the Personal Number of all citizens is public. No organisation would use knowledge of the PN as proof of identity. That is what a photo id form an acreditied organisation is used for. The PN is simply a good key to use.

    One may argue that having compatible unique keys in almost all databases enables or at least simplifies abuse by correlating various databases. But as far as identity theft goes, the SSN only enables it if the SSN are expected to be kept secret. AS long as they are public they are no more useful for identity theft than your name.

  39. That'd be the best identity-theft reform EVER! by Behrooz · · Score: 1

    That is possibly the most brilliant suggestion I've ever heard regarding identity-theft mitigation in the US. Releasing all of the SSNs is excellent, and we need to do it. Right now.

    Currently, the weakness in the system is that a SSN and publicly-available information is still being treated as secure enough to be useful for identification, despite being demonstrably insecure for nearly all individuals (I'm sure there are a few people out there who have never had a job, but they probably don't need to worry about identity theft) and completely compromised for a few.

    A complete disclosure would kick the legs out from the whole ridiculous system, forcing all stakeholders currently using it to stop, because the entire system would be demonstrably compromised. Right now, the burden of proof is on the victims of identity theft, but after a leak of this magnitude any entity who used the SSN for authentication would be facing the legal equivalent of Armageddon.

    Someone needs to acquire the complete SSN database, then publish the names followed by a new digit every week until complete disclosure is attained two months later. That'd give time and publicity for bureaucratic inertia to get a sound kick in the ass, and spark a dialogue about a robust, secure, and real system of identifiability to replace the worse-than-useless consensus kludge we have now.

    --
    "We have to go forth and crush every world view that doesn't believe in tolerance and free speech." - David Brin
    1. Re:That'd be the best identity-theft reform EVER! by metamatic · · Score: 1

      Yeah, I proposed basically the same idea elsewhere in this thread, and "on my web site back in Feb 2005.

      My idea, though, is that we have a widely published campaign with a set starting date that's at least a year in the future. So organizations have absolutely no excuse.

      --
      GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
    2. Re:That'd be the best identity-theft reform EVER! by defile · · Score: 1

      The only problem with such a complete database is that the street value of the data is through the roof, so any righteous criminal that set out to free it would have to resist great temptation to sell it to hardened criminal enterprise.

  40. What exactly is the problem? by pe1chl · · Score: 1

    "My company, a fairly large telco, still uses social security numbers for non-financial purposes; mostly for our IT ticketing system. I find it amazing that in these times, with how easy it is to use an SSN to obtain credit, that any company still does this."

    I would say that the problem is not that your company uses the numbers for non-financial purposes, but that it is easy to use it to obtain credit.
    *that* is the thing that should be fixed. Don't attempt to keep something like an SSN a secret, because that will certainly fail.

    Here in the Netherlands we have our equivalent of the SSN printed on just about every document and letter, and nobody considers that a problem.

    1. Re:What exactly is the problem? by winwar · · Score: 1

      "I would say that the problem is not that your company uses the numbers for non-financial purposes, but that it is easy to use it to obtain credit.
      *that* is the thing that should be fixed."

      What, and take the chance of harming our economy?!? :)

  41. It's a big project by anon*127.0.0.1 · · Score: 1

    My former didn't stop SSN as employee ID until they launched a two year project to consolidate all the the various HR processes into one big enterprise management software package. Keeping identification numbers straight during the switchover was a huge headache. Every current and former employee had three ID numbers during that time.. SSN, old employee ID (which was 0 + SSN, don't ask me why) and their new randomly-assigned employee ID. Keeping those numbers straight during the transition, making sure every single old database was scoured and updated, knowing which numbers to use in which situation... all of it was a major headache.

    It didn't help that we had a couple of major gaffes during the transition. At one point late in the process, a letter was sent out to all 6000+ employees with the information that "Your new employee ID is printed in the upper left corner of the address label on this envelope. If you have any questions call HR at xxx...". Except that somehow they managed to mail out all 6000 of those letters without anyone noticing that actually, the new employee ID *wasn't* printed in the corner of the label. Or anywhere else for that matter.

    --
    I am NOT a man!
    I am a free number!
  42. You're breezing over the issue by brunes69 · · Score: 1

    Visa IS REQUIRED BY LAW to take your social security number, or a tax ID number if it is a corporation, as part of their financial reporting requirments.

    There's a big difference between being required by law to collect your SSN AFTER/b> you have applied for the card and been accepted, and collecting your SSN BEFORE you have accepted in order to do a credsit check.

    There is no need for anyone to ever give their SSN to a company to do a credit check. However, most do anyway to save time.

  43. The otherway around by emj · · Score: 1

    Perhaps it shouldn't be so easy to missuse SSNs? Why do you have companies that allow the use of just SSNs to signup for something? SSNs and their equals are a very good identifiers but only if you have a password or something else that has been established as yours already.

    SSNs are the perfect single sign on.

    I don't see the problem at all...

    1. Re:The otherway around by Teancum · · Score: 1

      The biggest problem is that the SSN is misused by far too many banks and other institutions as a password to prove identify. Instead, it should be used as a part of somebody's name, such as "I am John Q. "532-66-3321" Public".

      If a SSN is used in any other context or manner, it is that context that is out of line. The same should be said for a mother's maiden name or any other "proof of identity" that is suggested. Instead, identify needs to be established with some sort of "trusted" group that makes a real-life face to face meeting with the person in some fashion and then offers that identity somewhere.

      The SSN is one of the most mis-used identification systems in the USA, and the Federal Government as well as other law-enforcement agencies who use "scare tactics" regarding the misuse of the SSN are barking up the wrong tree requiring you to set up some other alternate identification code. Instead, the SSN should be through legislation be prohibited from being used to establish identity except to be used in the same fashion that a name would be also used.

  44. Correct, and furthermore... by metamatic · · Score: 2, Interesting

    Right. The problem isn't your employer using your SSN to identify who you are uniquely. The problem is dumbass companies that pretend that knowledge of your SSN proves you are that person.

    I've written before that there's actually a free market solution to the problem. What it needs is for some well-funded activists (Gilmore?) to put together a nice big database of SSN info. We know all that info is available to any company that wants it.

    Then, public announcements are prominently made in the press (NYT ads, paper mail notifications to every major bank and so on) stating that on 2008-01-01, the entire database will be made public for search purposes on the Internet. On that day, you'll be able to look up and verify anyone's SSN for free. That's the way it should be, after all--it's an identification number, not a password, and anyone can look it up for $20 from one of the many online services. We're just going to change the price.

    This means that any organization currently using SSN as a secret identifier basically has to stop doing so, or face massive fraud and consequent liability lawsuits.

    --
    GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
  45. BOA lets you change your login ID by Anonymous Coward · · Score: 0

    RE BOA -- That's your choice.

    Years ago, you got to choose your own (long) numeric ID, and most people used their SSNs because they knew them. (I knew one person who used her phone number instead.) Now you can change your login ID through your account preferences, and the system prevents you from setting it to your SSN.

    Several other banking and brokerage institutions allow you to change IDs that in the past were required to be SSNs. Take a look at your account preferences.

  46. SSNs to verify passwords. by peetola · · Score: 1

    I used to work for a Help Desk for a large military contractor. When people locked their account or needed a password reset, we had to ask for the last four digits of their SSN to verify their identity. For the most part that worked fine, and nobody complained. However, someone in HR decided that we cannot get the SSNs of any contractors that we hired so for the last four digits field, they put the last four digits of their badge number. They forgot to tell us that, and we had lots of contractors who had to physically go to the security office and verify their identity because they fat-fingered their password. This also caused problems, as HR's software required the last four digits to be unique, which pretty much limited us to 10,000 contractors ever.

  47. Actually, you need to re-check your facts by Mycroft_514 · · Score: 1

    The law was added at the state level in some states. An example is Vermont.

    And it is needed in more states.

  48. Googling Revealed This Nice Government Report by scruffy · · Score: 1
    http://www.gao.gov/new.items/d051016t.pdf

    Basically, federal and state laws have all sorts of different restrictions. Related to this topic, it says:

    The Michigan law also contains a prohibition against the use of SSNs on identification and membership cards, permits, and licenses. Missouri's law includes a prohibition against requiring an individual to use his or her SSN as an employee number. Oklahoma's law is unique in that it only limits the ways in which employers may use their employees' SSNs, and does not apply more generally to other types of transactions and activities.
  49. SSNs at my work by paladinwannabe2 · · Score: 1

    We used to have SSNs on certain employee forms until I noticed them and mentioned that it was a bad idea to my supervisor. I removed it from the forms (we also have a unique ID number for employees). I also set it up so fewer people have access to SSNs.

    Seriously, though, this is /.- most of us here work in IT, so we are the ones who control the information distribution in our companies. If you notice something stupid about how SSNs or other personal information is distributed, tell your boss (or your boss's boss) and get it fixed.

    --
    You are reading a copy of my copyrighted post.
    1. Re:SSNs at my work by geekoid · · Score: 1

      some time it takes years to totally change the system.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    2. Re:SSNs at my work by Chanc_Gorkon · · Score: 1

      Sorry, IT does not control that. The users and managers do and if the users are stupid, they will continue to use SSN's until a corporate policy prevents it. I have screamed bloody murder about this 100's of times, yet it falls on deaf ears.

      --

      Gorkman

  50. Mod Parent Down it contains false info by stry_cat · · Score: 1
    Gun shops are REQUIRED BY LAW to take your social security number as part of criminal background checks

    False in a lot if not all states. The federal form from the BATFE that you have to fill out to buy from an FFL makes it clear that putting your SSN on it is optional. The form in Virginia also is quite clear that your SSN is optional. I've never given my SSN to buy any of my guns.

    Since I know one item in your comment is false, I'm going to have I suspect the rest of your info is just as faulty. Please cite the specific laws which requre the use of SSN in all the instances you mentioned.

    1. Re:Mod Parent Down it contains false info by stry_cat · · Score: 1

      Just to follow up. This is also the case in Penn. which shows that the SSN can't be required.
      http://www.patriotnetwork.info/Social_Security_Num ber_Case.htm
      http://www.vcdl.org/pdf/PA_SummaryJudgmentDecision .pdf

      http://www2.vcdl.org/cgi-bin/wspd_cgi.sh/vcdl/vade tail.html (see item #11)

      Bottom line the guy who said you need to provide an SSN to purchase a gun is full of crap. Unless he proves his other points we should assume he's wrong there too.

  51. Finacial Records by Alchemar · · Score: 1

    I need to get a tax form form Meryl-Lynch. I had moved right before they mailed it out. I called to give them a change of address. In order to log on the system I had to enter a username and password, the system told me the default was username:SSN Password:Last 4 digits of your SSN. It then informed me that I did not have a valid PIN number for the system, and asked me to enter one. I then got through the voice mail system to a real person. The first thing he asked was to verify the address: I explained that the reason I called was to change the address, because the one on record was not valid. He told me that they used the address to verify ID, all this after using my SSN to verify the ID and account information. The big problem was that the place I had moved from did not have a distinct address. Every utility had a different address listed. I use to have 6 lines of info for things I mailed hoping one would work. These address were spread across 3 cities. The Post office and UPS had different address, the electric company and the phone company had different address. Figuring out which address this guy need was a nightmare. I wanted to know how knowing my address was a good verification that it was me, and I got a smart answer about it apperently not being me. I finally gave up, hung up, found a previous bill from every utility company, had a list of several addresses that I was ready to try and started over.

    When I called back, I entered the SSN, last 4 digits of the SSN, and the PIN number I just created. The guy that answered the phone asked to verify that my address was "XXXX dumbas Dr..." and proceded to tell me the full address that they were using to verify ID. Finally getting to a manager it was explained to me that they only used the address if a valid PIN number was not entered. I explained that this leaves the SSN as the only thing needed to access the account. I was assured that it was much more difficult. I explained that I just did it, and was again told it could not be done. I asked to talk to a manager in charge of security, and was told that he was the one in charge of security concerns.

  52. Your ssn should not be used for any... by Anonymous Coward · · Score: 0

    The SSN number is to only be used for tax purposes -- any company using your ssn for any other reason is actually breaking the law. http://www.google.com/url?sa=t&ct=res&cd=3&url=htt p%3A%2F%2Fwww.utsystem.edu%2Fbpm%2F66Apx1Federal.d oc&ei=fckvRau9D4GuaIjmhNUO&sig=__4MlMe-Pw8Fg0LCc_8 47RUtK6Gg4=&sig2=-xa3oA2B8uL_CRzeFU25oA The above link is an amendment to the origional law.

  53. SSNs are on the way out by chrixated · · Score: 1

    I recently started work at a fairly large human resource outsourcing firm, and while many of our clients have their employees marked by an SSN, they're all identified by an internal ID. There's also a push to start taking SSNs out of client records completely. The unfortunate problem is that because everyone started using an SSN ID system, it's very difficult to take them out of the equation.

  54. And I thought I had it bad! by jsrjsr · · Score: 1

    Back a few months the hard drive on my work system crashed. IT rebuilt everything and delivered it to my desk with a new Lotus Notes password stored in a text file on the Windows desktop. I opened the text file, and sure enough, it was my full 9-digit SSN. Since the most everything else here uses is the last 4 digits, how and WHY did lower-level IT people have access to the full thing?

  55. Re:You think you have it bad? BZZZT by davidsyes · · Score: 1

    How WRONG you are, sir!

    On one 4th of July, 1999 I was asleep in my car on a paved street among a knee-high field in a little place called Alviso (at the time my future home was under construction and I'd already sworn I'd NEVER again rent an apartment, so I slept in my car for some 6 months, exercising and showering at work, but eating and recreating elsewhere...)

    Sunrise was past, and the fire department arrived to hose down the dry grass to prevent or reduce the risk of blazes, and when they saw my car, rather than knock on the window to see if I was alive, they instead called the police. She arrived, parked behind me, and then, I presume, ran my plates (SOP for any half-brained cop who doesn't want to be offed without the PD knowing their last position/contacts, etc...)

    She rapped on my car with her baton or truncheon or whatever the hell it was she had and asked for my ID. But, before that, I'd already sensed something was up because the fire trucks had backed away prior to her arrival. She ran my D/L and came back and asked for my SSN, no negotiation about it.

    I don't think that was the ONLY time they've asked me for it. Must be profiling, looking at my surname (purportedly of French origin, with a misspelling due to my father's father's family having been illiterate and released by their slave owners), probably thinking, "Oh, we've got Sayed, Sayid, Say-something....

    As IF that weren't enough for her, she wouldn't give (or was hesitant to give) me a "contact/report number" for my OWN future reference of the encounter. She had also asked me whether I had any scars, tatoos, or other identifying marks. I'd had enough of her egg-hunting shit and flubbed yes or no for any remaining questions. FUCK HER! (not because of gender, mind you..., but "FUCK THAT!") Why? Because she was a San Jose cop, ran my California plates, checked my CA drivers license, and STILL wasn't satisfied. I'd alREADY had contacts with the police from previous sleepings (changing my spots every night, rotating among some 5 or 6 to not "wear out my welcome". even had some police politely ask me to move on due to previous issues in the neighborhoods, but these didn't fish for things/beat the bushes, didn't challenge or question or humiliate me with their authority, just to be fair to them...)

    If my CDL and car plates don't bring back "detain"/"hold", "wait for backup", then DON'T hold or harass or humiliate YOUR SALARY PAYERS! I was beyond incensed, but I kept my cool. Besides, you DON'T want to go quoting your rights, penal codes, vehicle codes, etc without your OWN backup (say a live video feed of your own, an open mic that you tell the cop is on and will NOT be turned off and will NOT be removed from your vehicle or your person and that you will comply with the ticket signing expeditiously so you can both part ways to meet later in court...)

    YES, they CAN and DO ask for SSNs. If you don't give it, they can haul your ass in, whether or not the judge later tosses the arrest/detention out.

    And, YES, I even carried my buyer's/escrow papers and ALL the damned paper trail they'd need to find legitimate my reason for being in my car. I don't recall hearing of people in escrow murdering or being fujitives willing to flat out lay out their paper trail. And NO, I did not act furtively. I even let her (or other cops) check my car, in which they'd always find neatly/navy-style folded clean clothes and bagged, segregated worn clothes, my company laptop, my books and a few DEfensive implements...

    And, let's remember that was in 1999, and even IF some case could be plugged with my name, why would they suddenly NOW find something to pin on me (other than the urge to close some case?), so if I had something to hide, I doubt I'd sleep in a car just hollering "come check me out" when I COULD have rented a place but refused to. (Humbly and frustratingly, tho, I was part of the mass layoffs and since 2001 have been renting...)

    --
    Previously: "Linux... Toward the Sunrise..." Now: "Linux... Toward the-- No, now, part of Every Sunrise"
  56. Re:You think you have it bad? BZZZT by Anonymous Coward · · Score: 0

    Sorry, but having a home under construction is not a legitimate reason for sleeping in your car on the street. In fact, in some jurisdictions, merely the act of sleeping in your car is illegal. If you like sleeping in your car, rent yourself a garage...

    In different words, you didn't "have it bad", you were just behaving silly.

  57. Re:You think you have it bad? BZZZT by davidsyes · · Score: 1

    I never alluded that I had it bad sleeping in my car. It was a CHOICE. A rebellious choice. I decided to deprive rental properties and keep the damned money for myself. After all, why is it illegal to merely sleep in one's car, as ooposed to on the sidewalk? It's NOT just to "keep order" (reduced clutter or "car-invasions/robbery") and "sanitation", it's because of the same reason motorhome users have to keep roving all over the place when they travel: If people slept in "mobiciles" (I or we coined that term when he told me that he was going to do) as I did years ago and like friend who is a special-forces trainee did not too long ago, we'd deprive the State of revenues generated by rent taxes.

    It saved US money WE knew better what to do with. $800 x 6 months was $4800 I needed to do things with. Many mobicile dwellers don't cause trouble, and not having a fixed address is NOT a crime. But, NOT having a fixed address for the then prior six months ALMOST made the Escrow/Title company not file my papers. I wanted to ring her neck telling me she was not able to hand over my new home's keys if I couldn't provide an address. THAT was a good reason for having police give contact reports to their contacts instead of keeping them in a wheel book (note pad). I had a mailing address (USPS building, not other places), had my vehicle registration in order, my license current, and numerous clothing receipts, dining receipts, and a continuous stream of paychecks. Obviously such a person is not a plant or a fraud she would be able to ferret out. Hell, they even got my thumbprint as part of the escrow closing process. Surely, if I were a fugitive or wanted person or person of interest, I'd have been long rounded up.

    (Anyway, so much for sleeping on the streets being illegal. Just visit the Tendergroing/Tenderloin in SF. The police ROUTINELY don't enforce the anti-vagrancy law. Tourists must wonder what the hell is wrong with the US when they walk around Union Square, Powell, Taylor, Market, and numerous other streets seeing hundreds of people in tattered clothing waiting for food handouts from Glide Memorial; defecant and urine on building walls, in their doorways, between cars, on the sidewalks, in street tree boxes; vomitus and sleeping bags and blankets in the doorways of businesses, the stench of urine that cannot be washed away even by rain.... Sometimes I feel the UN ought to occupy various parts of the US to embarrass it into cleaning up at home. T/L should be earth-scoured and rebuilt, along with many other cities' blighted areas, affordable housing, living wages and more. Money wasted on fictitious enemies in the name of power, divine right and all the other bs instigated by shitty foreign policy could be better spent improving the Human Psyche/Human Experience and diginified living for "good 'ole 'merkuns".... OH, wait, my thyroid is out of whack again.... lost my meds....)

    --
    Previously: "Linux... Toward the Sunrise..." Now: "Linux... Toward the-- No, now, part of Every Sunrise"
  58. Heh by TheCabal · · Score: 1

    So how do you like working at Sprint/Embarq?

    I ordered a frame relay from them, had some trouble with them delivering on it. I was included on a round of internal emails regarding the order, and included was the internal ticket they use for order tracking. On the ticket was the SSN of the person who handles our account. I was shocked that they so freely distribute employee SSNs like that.