Slashdot Mirror


New Jersey DMV Employees Caught Selling Identities

phaedrus5001 writes "Ars has an article about two New Jersey DMV employees who have been accused of selling personal information they routinely had access to. The NJ prosecutor's office claims (PDF) their investigation 'uncovered that two employees of the New Jersey Motor Vehicle Commission were providing the names, addresses, dates of birth and social security numbers of unsuspecting residents that they obtained through their employment. They were charging as little as $200 per identity.'"

25 of 279 comments (clear)

  1. Not surprised by Lyrata · · Score: 5, Funny

    I wouldn't pay more than $200 to be from New Jersey, either!

    --
    50,000 characters used to live here.
  2. SSNs? by Manip · · Score: 5, Insightful

    Why can normal day to day employees even view plain text social security numbers? Wouldn't it make a lot more sense to hide that information like banks do with credit card numbers?

    Also, I find it ironic that these two relatively low level criminals will get the book thrown at them, but when the DMV legally sells that information to marketing companies everyone is happy. I guess they don't sell SSNs but still, thin line.

    1. Re:SSNs? by the_fat_kid · · Score: 4, Insightful

      normal day to day employees can probably read them because we have become lax about where we use our SSN.
      Want a phone? SSN
      want a rental? SSN
      want credit? SSN
      talk to someone at support? SSN

      Once upon a time these were supposed to be a Secret number that you only shared with the government and an employer.
      Now it's how you prove your citizenship and credit worth.

      --
      -- Sig under construction...
    2. Re:SSNs? by ColdWetDog · · Score: 5, Funny

      We needed a universally unique personal identifier. Only the feds could actually create one, and the SSN is the only one they ever got political consensus to create.
      The real problem is treating it as both identification and authentication.

      Three ID's for Credit Reporting Agencies under the sky,
      Seven ID's for Three Letter Agencies in their halls of stone,
      Nine ID's for each system you log on to.

      One ID for the DHS on it's dark throne,
      In the Land called DC, where the shadows lie.

      One ID to rule them, One ID to find them
      One ID to normalize the database and in the darkness bind them.
      In the land called DC where the shadows lie.

      (Apologies to just about everyone)

      --
      Faster! Faster! Faster would be better!
    3. Re:SSNs? by Urza9814 · · Score: 4, Informative

      Once upon a time these were supposed to be a Secret number that you only shared with the government and an employer.

      No. SSNs were NEVER supposed to be private. It's a freakin account number. The problem isn't them being used publicly, the problem is them being assumed private.

    4. Re:SSNs? by mcgrew · · Score: 5, Informative

      Are you kidding, or are you young? Keeping SS#s secret is a new thing. Hell, they used to print your SS# on your driver's license. ID theft didn't become a big problem until the internet.

  3. Re:This is more proof by s73v3r · · Score: 4, Funny

    Because a private company would never be caught doing something like this. Nope. They are all completely above any kind of corruption.

  4. You're Going To See More and More of This. by smpoole7 · · Score: 4, Insightful

    It's not a government vs. private sector thing, either. The simple fact is, you will always be able to find some corruptible person who's will to sell (or "leak," if he/she is just trying to harm a rival) information.

    I'm a geek and I loves me some technology, but still, I'm not blind to the dangers of giant databases filled with sensitive data And to be honest, I itch at the thought that anyone -- be it the federal government (with the Affordable Health Care Act) or private business (think of some large, national hospital group) has access to all of my medical records -- including prescriptions, diagnoses, and all the rest of it.

    But I don't know what the answer is. Someone smarter than me will have to come up with that.

    --
    Cogito, igitur comedam pizza.
    1. Re:You're Going To See More and More of This. by dkleinsc · · Score: 5, Insightful

      The solution that someone much smarter than me (Bruce Schneier) has repeatedly proposed is this: When doing something that involves sensitive data, you don't verify identity, you verify transactions. For instance, if you want to transfer money from your bank account, the question is not "Are you smpoole7?", it's "Does smpoole7 really want $150,000 to go to an account in Pakistan?". A smart bank will use alternate ways of contacting you (if they're really worried, they might even ask that you do this in person) to confirm that it is in fact your intent.

      This has a lot of ancillary benefits that probably make it worth the expense. For instance, it helps catch errors by the actual owner of the account.

      --
      I am officially gone from /. Long live http://www.soylentnews.com/
    2. Re:You're Going To See More and More of This. by dkleinsc · · Score: 4, Interesting

      Here's Schneier's essay describing this approach much better than I did.

      --
      I am officially gone from /. Long live http://www.soylentnews.com/
  5. Sigh by Aerorae · · Score: 5, Insightful

    I didn't realize that our identities were so worthless. Whether it is attributed to evil, or a lack of humanity on the part of the two employees, this represents a fundamental problem among people today: "Doesn't affect me, so I don't care."
    I believe that will destroy us even faster than bank collapses or political corruption, in a sense because those maladies are results of the "I don't care" problem. "I can buy these horrible securities, if it goes bad, it doesn't affect me, so I don't care", "My constituents want this, sure it'll put 100,000 people out of work, but it doesn't affect me, so I don't care", "Hell I'll sell peoples identities, sure they'll be plagued by this for a matter of decades to come, but it doesn't affect me, so I don't care."
    People need to care about things that don't affect them or else this world is very very doomed.

    1. Re:Sigh by Jeng · · Score: 4, Funny

      If the person cared about others they wouldn't be working at the DMV.

      --
      Don't know something? Look it up. Still don't know? Then ask.
  6. Re:This is more proof by 0123456 · · Score: 4, Insightful

    Because a private company would never be caught doing something like this. Nope. They are all completely above any kind of corruption.

    Unlike the DMV, a private company can't force you to use their services. Nor can they push a unique identifier on you which is then used as an id by numerous different databases.

  7. Re:This is more proof by cptdondo · · Score: 4, Insightful

    Great soundbite. Now expand on it. Tell us how, exactly, you would put your proposal into practice.

    Fewer cops? Less regulations? Which ones? Fewer teachers? No DMV (and no vehicle registrations, or safety regulations, or license plates, or insurance?)

    I want to know.

  8. Re:This is more proof by cptdondo · · Score: 5, Insightful

    Experian? Other credit rating companies?

    I'm sure I could come up with a lot of others that disprove your hypothesis. There are lots and lots of private companies that we have to do business with. We have no choice in the matter.

  9. downside to buying IDs from DMV by corbettw · · Score: 4, Funny

    You have to stand in line for hours just waiting to get the CD with the data on it. And don't get me started on all the forms you have to fill out!

    --
    God invented whiskey so the Irish would not rule the world.
  10. Re:This is more proof by DanTheStone · · Score: 5, Funny

    Obviously the government shouldn't know your Social Security number...

  11. Re:This is more proof by vlm · · Score: 5, Informative

    No DMV (and no vehicle registrations, or safety regulations, or license plates, or insurance?)

    The following licenses I have, or previously held, none of which are "IDs" requiring SS number:
    ham radio license
    GROL
    former private pilot license (maybe this has changed to photo now?)
    former fishing license
    several former military operators licenses including really weird stuff like immersion heater (I kid you not) and RTFL rough terrain forklift
    my library card is functionally a license as opposed to an ID card
    my old non-photo college ID card (I guess those are mostly photo "real forms of ID" now?). It was mainly used at the library and to pay for photocopies.
    My temp drivers license when I was 15 until I passed my formal DL test had no "id" properties, it just gave me permission to drive with a parent in the car supervising me.

    Functionally American drivers license functionality is merged with ID card functionality, as if any separation is impossible, but its certainly not required. None of the stuff you listed requires ID directly, although registration title transfer is gonna require the services of a notary, and the notary will demand an ID, or the DMV personnel could operate as notaries, ending up right where we started...

    --
    "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
  12. Re:This is more proof by jackbird · · Score: 5, Insightful

    A credit check is increasingly becoming part of employment screening, and is entirely necessary for both renting and purchasing a home (unless buying the home for cash). Being homeless rises above "inconvenient."

    Providing a social security number is also required to open a bank account, the lack of which is also a bit more than "inconvenient."

  13. Re:This is more proof by rickb928 · · Score: 4, Insightful

    This is the debate. If you don't like the restrictions, don't drive.

    This is the WRONG attitude and approach.

    We expect our government to, among other things, serve us by managing certain things. One of these is the licensing of drivers, so that we can be marginally safe on the roads, that entirely unqualified drivers are not allowed to operate vehicles, and that dangerous drivers are removed from the road to some degree. Imperfection is rampant, but it works farly well.

    Driving is, in much of American a NECESSITY. To claim it is a privilege may be linguistically accurate, but it is not accurate at all. It is a necessity for most of us.

    In that light, our governments' role shoudl never be to make licensing as difficult as possible, nor should it be to force applicants to exert themselves merely to satisfy the bureacracy's self-serving purposes. It should be the goverments' role to facilitate and deliver the needed service, IE licensing etc.

    The argument that driving is a privilege is to leave open the option that for some reason, we should serve our govermnent. The opposite is the desired relationship, and one that should be not only normal, but expected.

    I know you're being sarcastic, and you're excused from being the target this screed. But some people actually hold that driving as a privilege means that the agencies can be permitted to make it difficult to maintain the privilege.

    That is wrong.

    --
    deleting the extra space after periods so i can stay relevant, yeah.
  14. Re:This is more proof by cptdondo · · Score: 4, Insightful

    It might interest you that there used to be way fewer teachers, no administrators, no dept of education ... and the quality of education was way higher.

    Citation, please. Hard data, not more soundbites.

  15. Re:This is more proof by Anonymous Coward · · Score: 5, Insightful

    Actually it is forced on you. Just try going through your entire life without ever having credit pulled on you. Want a phone? Credit check. Internet? Credit check. Car insurance? Credit check. Rent an apartment? Credit check.

    Or how about a job? Credit check.

    None of these involve providing credit, and all of them are part of a normal responsible American lifestyle. Yet you still get a credit check.

  16. Re:This is more proof by icebraining · · Score: 5, Informative

    Our ID card here in Portugal is a smartcard with a key pair. When connected to an appropriate reader, it can provide copies of the public key or sign stuff with the private key (without ever copying it to the machine).
    You don't need a smartphone, a data plan or know what is a key pair or even that your card has one.

    If you want to authenticate when physically present, just insert it in their reader and input the PIN (as said, the private key will NOT be copied out of the card, so it's safe).

    If you want to authenticate online with it, you just need a $16 reader (available on big retail stores) which is supported by IE, Firefox, Safari and Chrome, using PKCS#11 or similar.
    Again, no need to understand how it works - the follow the simple steps on the site.

  17. Re:This is more proof by mcgrew · · Score: 4, Insightful

    If the manufacturer and/or seller of a gun is liable for what the new owner does with it,

    He isn't. Where are you getting this nonsense?

    or a bartender is liable for what a patron does after purchasing booze,

    He isn't liable selling booze to a sober person. Are you ten years old? It is definitely irresponsible to sell booze to someone who's drunk, especially if you know he's driving. In this case the bartender is responsibe, as he should be.

    or I get in trouble for selling you a class 4 laser and you do something dumb

    But you don't. Are you trolling, or are you really that ignorant?

    Thats how it works in private aviation, anytime anyone crashes for any reason, the vehicle manufacturer gets sued, because that's where the money is.

    Citation needed... and considering the earlier fantasies in the same comment, it needs to be a damned good citation.

  18. Re:This is more proof by Kamiza+Ikioi · · Score: 4, Insightful

    That's a great system that the United States will never adopt. Between the tin foil hats and the Apocalypse believers, we're thoroughly terrified against any type of secure identity verification cards. Because, after all, it's a slippery slope to reading your brain, watching you have sex with your wife using satellite x-ray vision, and tattooing 666 on your forehead.

    So... "no need to understand how it works"? I see you've not encountered sheer stupidity in its raw, unbridled form. Welcome to the United States!

    --
    I8-D