Text only | Text with Images

The Core

Why We Are Here => Hardware & Technology => Topic started by: rcjordan on November 27, 2017, 03:46:15 PM

Title: Name+DOB+SSN=FAFSA Data Gold Mine
Post by: rcjordan on November 27, 2017, 03:46:15 PM
https://krebsonsecurity.com/2017/11/namedobssnfafsa-data-gold-mine/
Title: Re: Name+DOB+SSN=FAFSA Data Gold Mine
Post by: Mackin USA on November 27, 2017, 03:52:57 PM
OMG > Fing GOV
Title: Re: Name+DOB+SSN=FAFSA Data Gold Mine
Post by: rcjordan on November 27, 2017, 04:03:04 PM
>Fing GOV

DB Cooper has found the same sophomoric security flaw with several major and regional financial institutions (brokers, banks, Equifax and other credit score companies).  With Name+DOB+SSN plus a free Gmail account that looks like it belongs to the targeted person, it's possible to hijack -or at least manipulate- an account. It's one reason DB doesn't bank online.

<added>

>brokers, banks, Equifax

Also insurance companies
Title: Re: Name+DOB+SSN=FAFSA Data Gold Mine
Post by: Mackin USA on November 27, 2017, 04:31:46 PM
DB was a WISE MAN
Title: Re: Name+DOB+SSN=FAFSA Data Gold Mine
Post by: gm66 on December 07, 2017, 12:52:31 PM
The OP link is 502 for me.
Title: Re: Name+DOB+SSN=FAFSA Data Gold Mine
Post by: rcjordan on December 07, 2017, 01:56:43 PM
Still works here. They're blocking you.
Title: Re: Name+DOB+SSN=FAFSA Data Gold Mine
Post by: rcjordan on December 07, 2017, 02:03:06 PM
>With Name+DOB+SSN

DB phoned in to say that he again had to use this ploy last week to manage a disabled person's health insurance. DB has full power-of-attorney for the person involved but the health insurance company wanted their own custom permissions form on file before discussing any billing details.  That would take too long and the problem would spiral out of control. BUT the online account had a CHAT feature, soooo.........  Bingo! Mission accomplished.
Text only | Text with Images