Remix.run Logo
▲ compil3d 14 hours ago

I'm disgusted. How would one go about ensuring that their social couldn't be used to create an account with this much liability? Would freezing a credit line be enough?

▲LogicFailsMe 14 hours ago | parent | next [-]

Prosecutors have no interest in "justice." They are measured solely on conviction rates. If she's convicted, she will go through needless life-destroying suffering because of this. But at the end, it will be overturned after the prosecutors in question have been elected to Congress or a governorship. And then lawsuits will ensue. And that's why BS like this will never stop.

▲mjhay 14 hours ago | parent | next [-]

Even if she’s not convicted, paying lawyers, time off work, mental health, etc., can still be plenty life-destroying.

▲LogicFailsMe 12 hours ago | parent [-]

I'm just wondering where the EFF and the ACLU are at the moment. This seems like a perfect opportunity to point out the dangers in current cyber crime laws and do some genuine good in the world.

▲pixl97 14 hours ago | parent | prev [-]

And with internet crimes like this the legal attack could come from anywhere. I trust that Arkansas does not have a competent digital crimes task force, as they are idiotic in almost everything else in the legal world.

▲wil421 14 hours ago | parent | prev | next [-]

Someone opened up a PayPal account in my name a few weeks ago using an old address. I canceled my PayPal account years ago because I was afraid of it being linked to my bank.

It took an hour to get past the AI who kept hanging up on me. I’m more concerned after reading the article.

▲nontiko 13 hours ago | parent [-]

How did you know the PayPal account had been created?

▲coldfloor 13 hours ago | parent | prev | next [-]

I'm feeling paranoid now and wondering if the best defense is to proactively open accounts with Cash App, Venmo, whatever other stupid peer-to-peer wallet apps exist, just to lock down my identity and be in control of it. I'm not sure if locked credit and monitoring would work here because these services probably don't do credit checks or show up on reports anyway.

▲techgnosis 3 hours ago | parent [-]

I felt the same way, and made a CashApp account, but I don't think it matters. It didnt say anything about the fraud account having her email address. It just had her name and they inputted her social. I don't think there's anything you can do but pray.

▲davsti4 14 hours ago | parent | prev | next [-]

That is one defense for having an open system, but that only affects services who use these systems. The article doesn't mention if CashApp actually used her social to check credit, or just took the attackers' word by checking if the SS was valid and provided credit.

The other problem is that there isn't just one credit system, there are 3 major ones for general consumer credit, and other specialty ones (Innovis, etc; I had a list somewhere but can't seem to find it; AI might be a friend here).

▲trollbridge 13 hours ago | parent [-]

It would be a significant improvement if full names with middle name and maiden name/name changes (if any), date of birth, and SSN were published:

Because then nobody could keep using them like they're a password, and would have to find actually secure ways of identifying people.

▲bluGill 13 hours ago | parent [-]

Only SSN is not public information. They are not published, but the records are public if you go to the right place in person and ask the right questions. (sometimes you have a "need to know" before they will tell you, but it isn't hard to find one)

Even SSN is not private - you need to share it with enough people that it is safe to assume bad people have it.

Connecting an ID to a individual person is very hard. It is even harder when that person is not physically there.

▲trollbridge 13 hours ago | parent [-]

One of the more irritating forms of "ID" now is asking people to upload a driver licence photo, passport photo, or take a selfie of themselves.

▲ashleyn 14 hours ago | parent | prev [-]

I've heard someone mention using Chexsystems but I'm not sure if that's available to ordinary consumers or how you'd be able to just go and do that. Or if it would show something like Cashapp.

▲hoppyhoppy2 14 hours ago | parent [-]

https://www.chexsystems.com/security-freeze/place-freeze

I don't know enough about it to say if it would prevent the opening of a CashApp account.

▲davsti4 14 hours ago | parent [-]

It actually depends on which credit bureau CashApp is contracted to use. If they use TransUnion, then you'd need a TransUnion account and freeze your credit report there.