Slashdot Mirror
Why Google Wants Your Kid's SSN
Jamie found a somewhat creepy story about a kid's art contest run by Google. As part of the entry, they need the last 4 digits of a social security number. The article suggests that the information requested by the contest should make it possible to guess at, and compile a list of children's social security numbers. It's bizarre and worth your read.
Google's already removed the field from a newer version of the entry form. will not store any collected numbers, and has explained the need for the city of birth (to help prove US citizenship as required by the contest).
Without even reading the article I know why. SSNs contain demographic data about where and when somebody is born. They are not serial numbers or randomly generated. Anybody with access to the first half of the SSN has demographic data.
I support the Slashcott and will not be reading or commenting from 2/10/14 to 2/17/14. Beta is steaming pile of dog shit
They need to have SSN numbers as children so that they may be claimed as tax deductions by their parents.
The problem isn't with google for collecting social security numbers. The problem is that SSNs are so sensitive in the US. I live in Sweden and here social security numbers are a matter of public record and many companies collect these numbers from their customers for their databases. It's quite convenient and, if done right, not as privacy infringing as people seem to think. It's quite ridiculous to have, like the US, a system where you can impersonate someone by knowing their number.
I don't know how the US got this meme that knowing your SSN somehow proved your identity. Of course once that meme has developed and companies start using the SSN as a password, people become very protective of their SSNs, and the idea that it's a special number that requires protection becomes self-reinforcing.
No kidding!!! What do you say at this point?
And yet the government, banks, corporations, etc. all require you to provide it because they assume it to be secure. Or rather, because they convince us SSNs are secure, all while knowing they're not.
Keep your eyes to the sky.
It's not a contradiction to anyone who can understand the word "discarded" in relation to paper forms does not mean deletion of a file on a computer.
Also, this article was written 4 days AFTER Google had already changed the form to not have the SSN. This is even mentioned in the article body.
Yeah, I know it's on Huffington, but that crap doesn't qualify as a news article. Calling it a blog is doing it a favor, calling it a lunatic rant about a problem that's already taken care of would be more accurate.
This sentence no verb.
But I can literally taste the tin foil on this guy's head. The little nutter gave me synesthesia. I think Its mostly his tone of voice. The way he's simply incredulous about the possibilities, with nothing to show for it.
1.) I'm not much of a conspiracy theorist by disposition, but...
Hey, I think I spotted where he became a conspiracy nutcase.
Are these posts here to show us how evil Google has become to to show us how nutty the "google is evil" crowd has become? Because despite the title, I'm leaning with the latter.
Some mid-level employee came up with a clever but ultimately bad way of distinguishing applications. Conspiracy theory: ignored.
The Huffington Post does not pay the authors of their stories. They are owned by Arianna Huffington, new owner of AOL.
Evil...
Done...
"Helping to keep you two steps ahead of the Thought Police!"
Same with my parents...in the 70s and 80s. But guess what? I need my kids' SSNs to claim them as dependents now, starting in the late 90s. So your premise that laws never change is flawed, therefore your conclusion that olsmeister's claim is false is flat-out wrong.
God invented whiskey so the Irish would not rule the world.
It gets my blood pressure up a bit every time I read about "revealing" someone's SSN as having penetrated an inner sanctum. The password-secret treatment of that number needs to be dropped. It's time for legislation in the US that makes it invalid and indefensible in court to treat knowledge of an SSN as an authentication factor. Any organization that treats knowledge of the SSN as an authentication factor should be fully liable for the consequences of any fraud that results.
Note I'm talking about authentication, not identification. Nobody thinks Google shouldn't be able to identify the contestants, and an SSN is more unique than names. The problem only comes from the ability to use that number as a "password" to authenticate for access to things (like bank accounts). Treating the SSN as a "username" would not cause the problem; it's using it as an authenticating secret despite the fact that it's easily accessible that makes revealing it a terrible security lapse.
Knowing your SSN should be no more helpful to a fraudster than knowing your full name or hair color. It should be treated as information too readily available to be of any use for authentication. Reliance on that kind of information for authentication should be evidence of failure in due diligence, and lead to liability for that inappropriate reliance. If your bank lets someone take all the money out of your account just because they know your full name they should be liable. If they do just because they knew your SSN it should be treated the same way.
Any technology distinguishable from magic is insufficiently advanced. - Geek's corollary to Clarke's law
Mine is that any and all corporations are staffed, managed and owned by people. They also make money from people. If all corporations are evil it can only be because groups of people are incapable of being good, or there is an active disadvantage to being 'good'. Of course that's entirely ridiculous, which partially explains it's insightful moderation.
There are plenty of companies out there that will actively refuse to screw customers over because they believe it for ideological reasons or because they believe it will make them more profitable in the long run. Tarring all companies with the same brush is just as naive and counter-productive as doing the same with people, women, Americans, politicians, Christians etc.
"As part of the entry, they need the last 4 digits of a social security number"
Want, not need.
Then your parents did their taxes incorrectly. I can assure you that shortly after my birth the government required SSNs for all dependents. Such that my parents had to get social security cards for myself, and 4 other siblings at the same time. As a result, our numbers are very close to each other. Further more, had you prepared your own taxes (properly), you would know that the parent is correct.
Thanks 711123