Hacker Newsnew | past | comments | ask | show | jobs | submit | compil3d's commentslogin

I'm disgusted. How would one go about ensuring that their social couldn't be used to create an account with this much liability? Would freezing a credit line be enough?

Prosecutors have no interest in "justice." They are measured solely on conviction rates. If she's convicted, she will go through needless life-destroying suffering because of this. But at the end, it will be overturned after the prosecutors in question have been elected to Congress or a governorship. And then lawsuits will ensue. And that's why BS like this will never stop.

Even if she’s not convicted, paying lawyers, time off work, mental health, etc., can still be plenty life-destroying.

I'm just wondering where the EFF and the ACLU are at the moment. This seems like a perfect opportunity to point out the dangers in current cyber crime laws and do some genuine good in the world.

And with internet crimes like this the legal attack could come from anywhere. I trust that Arkansas does not have a competent digital crimes task force, as they are idiotic in almost everything else in the legal world.

Someone opened up a PayPal account in my name a few weeks ago using an old address. I canceled my PayPal account years ago because I was afraid of it being linked to my bank.

It took an hour to get past the AI who kept hanging up on me. I’m more concerned after reading the article.


How did you know the PayPal account had been created?

I'm feeling paranoid now and wondering if the best defense is to proactively open accounts with Cash App, Venmo, whatever other stupid peer-to-peer wallet apps exist, just to lock down my identity and be in control of it. I'm not sure if locked credit and monitoring would work here because these services probably don't do credit checks or show up on reports anyway.

I felt the same way, and made a CashApp account, but I don't think it matters. It didnt say anything about the fraud account having her email address. It just had her name and they inputted her social. I don't think there's anything you can do but pray.

That is one defense for having an open system, but that only affects services who use these systems. The article doesn't mention if CashApp actually used her social to check credit, or just took the attackers' word by checking if the SS was valid and provided credit.

The other problem is that there isn't just one credit system, there are 3 major ones for general consumer credit, and other specialty ones (Innovis, etc; I had a list somewhere but can't seem to find it; AI might be a friend here).


It would be a significant improvement if full names with middle name and maiden name/name changes (if any), date of birth, and SSN were published:

Because then nobody could keep using them like they're a password, and would have to find actually secure ways of identifying people.


Only SSN is not public information. They are not published, but the records are public if you go to the right place in person and ask the right questions. (sometimes you have a "need to know" before they will tell you, but it isn't hard to find one)

Even SSN is not private - you need to share it with enough people that it is safe to assume bad people have it.

Connecting an ID to a individual person is very hard. It is even harder when that person is not physically there.


One of the more irritating forms of "ID" now is asking people to upload a driver licence photo, passport photo, or take a selfie of themselves.

I've heard someone mention using Chexsystems but I'm not sure if that's available to ordinary consumers or how you'd be able to just go and do that. Or if it would show something like Cashapp.

https://www.chexsystems.com/security-freeze/place-freeze

I don't know enough about it to say if it would prevent the opening of a CashApp account.


It actually depends on which credit bureau CashApp is contracted to use. If they use TransUnion, then you'd need a TransUnion account and freeze your credit report there.

I was hoping to read about serverless functions :/


Bruh of course this is coming out of Portland. That'll be the last city writing code by hand.


You gotta lose that serif font my guy.


I probably have to redo the whole thing


done :)


HN hug of death?




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: