Borges alleges that a little-known federal tech team called the Department of Government Efficiency, or DOGE, copied the government’s master Social Security database into a cloud system that lacked normal oversight.

If his account is correct, the mishandling of this information could expose hundreds of millions of people to fraud and abuse for the rest of their lives.

all 37 comments

sorted by: hot top controversial new old
[–] 55 points 8 months ago (3 children)

At this point my ss number has been stolen by so many people I'm not sure this matters.

I still want Elon nailed to a pole by his genitalia and set on fire for what he and big balls did.

But I use to work for the DOD and the Chinese kept breaking into OPM's computers and stealing everything about me. So I'm pretty sure my clone is out there somewhere enjoying my high credit score.

  • source
  • hideshow 3 child comments
  • [–] 4 points 8 months ago (2 children)

    you wouldn't have a high credit score if you had a clone out there abusing it.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 8 months ago

    That’s why you freeze your credit to prevent fraud applications. It’s super easy to do but most people don’t know that you can freeze/unfreeze it anytime by creating an account with the big 3 bureaus.

  • source
  • parent
  • [–] 49 points 8 months ago (5 children)

    This number is required sharing so often by the time you hit middle age, there are good odds it’s in the wind already.

  • source
  • hideshow 5 child comments
  • [–] 7 points 8 months ago* (last edited 8 months ago) (2 children)

    My original uni ID was my SSN. It also was on our driving licenses for a bit, IIRC

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 8 months ago (1 child)

    At university in the 90s they publicsllt posted grades by ssn instead of name.

    My driver's license ID number was my ssn. Then they changed it to a different number, but I got a state ID as a backup with a pic in case the license was lost and that type of ID had my ssn. No idea what the state ID uses any more, but probably not that since apparently the very insecure and public nine digit number magically became super secret because credit companies wanted it to be.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 8 months ago

    I started in the late '90s as well. I can't remember for sure if the exams/grades were posted by SSN. I have some memory of that, but I also have seen it in videos and I'm not sure if I'm conflating the two.

  • source
  • parent
  • [–] 2 points 8 months ago (1 child)

    before 2011 the first three digits was the local when you requested one which is usually when you where born at the hospitals location and the next two are about when. When they ask for last 4 they are asking the the 4 digits that can't be sussed out. for security.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 33 points 8 months ago

    a little-known federal tech team called the Department of Government Efficiency, or DOGE

    Little-known? Really?

  • source
  • [–] 25 points 8 months ago (5 children)

    The whole idea that we have some permanent "secret" number which is used to uniquely identify us is just really, really dumb in this day and age. There are better solutions, but they are hard, cost money and will probably face an insane level of political resistance. So, we continue to lurch on with the dead corpse of a bad idea that is social security numbers. But hey, at least it's cheap, right?

  • source
  • hideshow 5 child comments
  • [–] [S] 7 points 8 months ago (4 children)

    What if social security was instead a gpg key pair?

    Although it will probably become a blue checkmarked profile on X.com

  • source
  • parent
  • hideshow 4 child comments
  • [–] 8 points 8 months ago (1 child)

    Do you have any idea how many people will lose their key?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 7 points 8 months ago

    Could set up a key escrow with the issuing agency so there is a recovery mechanism if they can prove their identity through other means. That's at least as secure as the current model in terms of issuance.

    Ideally we would move towards self-sovereign identities, but that's a whole other effort.

  • source
  • parent
  • [–] 0 points 8 months ago

    That's really my thinking on it. Though, I would do the same thing the US Government does for ID cards now: smartcards.
    So, we already have the Read ID act, which started the standardization of ID in the US, let's take it one step further. The US Government stands up a PKI infrastructure, which then issues subordinate issuer certificates to the States. The States are then in charge of issuing each person a smartcard with a personal digital certificate. These cards would be tied to drivers licenses or state ID cards, much as Real IDs are today. There would need to be a Federal standard on what types of card technologies would need to be used. And we'd probably want both contact chip and NFC communications.

    When you want to access Government services or specific areas which actually need that level of identity confirmation, you would go through a similar process to any digital certificate login. You tap/dip the card, enter a pin and the systems exchange an encrypted nonce to verify the private key. I'd also want to see some regulation around when you can be asked to use it. With GDPR style fines (e.g. 5% of global revenue, per incident) behind those regulations.

    To throw a bone at the "think of the children" crowd, to get them on-board politically, it would also be interesting to investigate the possibility using the system for age verification, without providing identification to anyone. E.g. using something akin to a zero-knowledge proof, or just a bit which can be set when signing a nonce which shows that the ID is valid for whatever age is required for something. But maybe that's just my not-quite-awake brain coughing up silly ideas.

  • source
  • parent
  • [–] 23 points 8 months ago (1 child)

    Open article, Ctrl+F "DOGE", yep.

  • source
  • hideshow 1 child comment
  • [–] 16 points 8 months ago

    I think most sane, thinking people assumed data theft was going on all along. It was the main purpose of DOGE, who were placed in our institutions by a corrupt president and pretended to be there to save the government money.

  • source
  • [–] 14 points 8 months ago

    And I bet if they are changed or reissued, certain people won't be given one.

  • source
  • [–] 13 points 8 months ago

    Yep.

    Thats Elon's tech expertise right there.

    Quite literally doxxed the entire country and more than likely comprimised the security of basically everything he touched.

    In a sane world, he'd be in some kind of fucking hyper prison, for directing and overseeing the largest data breach essentially in all of history.

    If somebody hacked in remotely and did this... they would be in hyper prison, serving like thousands of life sentences.

  • source
  • [–] 12 points 8 months ago (2 children)

    2-year credit monitoring service, take it or leave it.

  • source
  • hideshow 2 child comments
  • [–] 33 points 8 months ago

    Just make social security numbers public information at this point. Who cares. Don't develop your security model around a users SS number being secret.

  • source
  • [–] 8 points 8 months ago (3 children)

    Remember, freeze on all your credit accounts. In fact this should be an opt out situation at this point, you should have to request NOT to have a freeze on your accounts at all anymore.

  • source
  • hideshow 3 child comments
  • [–] 12 points 8 months ago
    [–] 6 points 8 months ago

    If they do, I'm sure this will be particularly fun as an overseas citizen (planning to renounce when my parents pass or I can convince them to GTFO... which is not happening while either of my Trumper step-parents are alive).

  • source
  • [–] 3 points 8 months ago (2 children)

    Well, I already have no credit, what with the poverty.

  • source
  • hideshow 2 child comments
  • [–] 2 points 8 months ago* (last edited 8 months ago)

    Sounds like The Goblin is in town.

  • source
  • [–] 2 points 8 months ago

    Reminder, everyone should have frozen their credit at all three bureaus after the Equifax breach anyway. Everyone's identity has been compromised for a while.

  • source
  • 149 comments in c/technology@lemmy.world view that post
    28 comments in c/personalfinance@sopuli.xyz view that post
    11 comments in c/cybersecurity@sh.itjust.works view that post
    6 comments in c/security@programming.dev view that post