Top

LifeLock Guy Hacked :(

May 22, 2008

457-55-5462 Todd Davis
I think this is a sad day. A sad day indeed. Todd Davis, CEO of Lifelock (his social security #457-55-5462). Todd Davis has promoted his company by advertising his social security number on the web, radio, tv and billboard signs.

My name is Todd Davis
My social security number is 457-55-5462

I’m Todd Davis, CEO of LifeLock, and yes, that’s my real social security number*. Identity theft is one of the fastest growing crimes in America, victimizing over 10 million people a year and costing billions of dollars. So why publish my social security number? Because I’m absolutely confident LifeLock is protecting my good name and personal information, just like it will yours. And we guarantee our service up to $1 million dollars.”

While I’ve always thought that it was a risky way to promote one business (lol), I’ve always believed that it was a good idea. What they do is monitor your credit card and fico information and alert you if there is anything suspicious. It works (you can also do your self for free). But the Life lock service doesn’t protect you 100% from identity theft.
Some guy in Texas took Todd’s personal information and used it for a pay day load (there is not system to actively keep track of the Payday loan market). So the guy was able to get $500. When it was time to pay back the Payday loan (+1million% interest or whatever it is) the Payday store called the REAL Todd Davis (social security #457-55-5462). I think its unfortunate because it seems like a pretty good service. They are one of the few organizations in the U.S. actually trying to help people take on what is now and epidemic with now grassroots effort to slowdown ID theft and financial fraud.

Although Todd Davis was hacked, I believe their product will still be an effective way to be proactive method of protecting yourself from ID theft & financial fraud. But you should definitely take extra steps to safe guard your personal information. Don’t advertise your social security, your physical address, phone number, birthday or critical information.

Its $10 a month. I’m thinking of doing it just so I can contribute to their cause.

Popularity: 3% [?]

US National ID Card: Security or Citizen Tracker

June 14, 2007

Most American citizens violently oppose a National ID card.  The federal government can get around this in two ways: 

    1. Don’t call it a national ID card 
    2. Don’t put the federally controlled database in a federal building

The U.S. government is doing both of these things (as up 2007, should be complete by 2009).

According the the Department of Homeland Security’s FAQ on REAL ID it is NOT a national ID card & the feds will not create a national database:

“Is this a National ID card?

No. The proposed regulations establish common standards for States to issue licenses. The Federal Government is not issuing the licenses, is not collecting information about license holders, and is not requiring States to transmit license holder information to the Federal Government that the Government does not already have (such as a Social Security Number). Most States already routinely collect the information required by the Act and the proposed regulations.”

“Will a national database be created that stores information about every applicant?

No. The REAL ID Act and these regulations do not establish a national database of driver information. States will continue to collect and store information about applicants as they do today. The NPRM does not propose to change this practice and would not give the Federal government any greater access to this information”  

Well piss on my back and tell me its raining! The government is NOT creating a national ID card.  The only problem with the above statements issued by the DHS is that they are bullshit. 

Imagine.  ME, a security guy of all people, opposed to a National ID Card?  But I’m not the only one.

First off, what is this National ID Card REAL ID Card?

On March 1, the Department of Homeland Security (DHS) released draft regulations [PDF] for implementing REAL ID, which makes states standardize drivers licenses and create a vast national database linking all of the ID records together. Once in place, uses of the IDs and database will inevitably expand to facilitate a wide range of tracking and surveillance activities.EFF

As stated above, the National ID Card for the U.S. would be based on existing State I.D. Cards and driver’s license programs.  The main issue is linking all state databases together so that the federal government can track citizens.  

Now you may be wondering: Does this sound like something an illegal immigrant and/or criminal would not be able to falsify?  (and even if they are caught current laws for illegal immigrants are not enforced)  If illegal immigrants are not going to abide by the law, does this law really enhance the nation’s security?  

Oppose the Real ID Act of 2005 

My main reason for opposing a US national ID card is that I don’t trust the federal government with a consolidated view and control of all of our information.  I think all the information they gather will eventually fall into the wrong hands (on purpose or by negligence).  I was in the military, so the feds already have my data and the feds have lost MY {privacy act protected} information more than once.  A branch of the U.S. government lost 25.6 million account including the Social Security Numbers for Veterans more than once. They kept this information secret from the victims for 19 days.  19 days is ample time for someone to steal an identity once they have the information they need.  In one case the data was supposedly recovered and deemed by the FBI forensics as un-tampered with.  Supposedly they are not creating a seperate national database… but the linked state system WILL be the national database from which the feds will feed.  Its a play on words and I wish people would wake up screaming about this.

There seems to be a disregard for protecting the privacy and security of citizens.  The resources that would normally be used to protect us are being wasted and sent to serve other purposes.  In my oppinion security is still NOT being done because illegal immigrant laws are not being enforced despite the fact there is a “war on terrorism”.  Now if you don’t think something is seriously wrong about the protection of our borders at a time when their is a “war on terrorism” read the story of Border Patrol Agent Ignacio Ramos being jailed for shoot a drug dealer trying to enter the country. The DHS officials lied to congress about these agents (and got caught).  Drug smuggler Osbaldo Aldrete-Davila is a free man.  Meanwhile, other border patrol agents are being deployed to IraqI believe there is a reason that the law is not enforced but I leave that speculation up to you.

Privacy Clearing House has a chronological list of data breaches starting from 2005.  The more databases of large organizations (schools, federal/state, credit cards) our personal information is in, the greater the risk of ID theft and financial fraud we face.  ID theft is currently the fastest growing crime in the US and UK.  And its been the fastest growing for a long time.  I attribute this to organizations putting security last when it should be implemented from the very begining and maintained aggressively. 

So, a national card REAL ID registry databases at the federal level may only add to on-going issues of personal security of US citizens which the US government does not seem to worried about too much. 

To the credit of the U.S. federal government, the Department of Homeland Security’s Chief Privacy Officer, Hugo Teufel III, issued a Privacy Impact Assessment (PIA).  According to the document the National ID card would be difficult to falsify. 

Other issues addressed in the PIA:

The PIA addresses the key privacy issues posed by the Act: (1) Does the REAL ID Act create a national identity card or database; (2) How will personal information required by the REAL ID Act be protected in the state databases; (3) How will the personal information stored on the machine readable technology on the driver’s licenses and identification cards be protected from unauthorized collection and use; and (4) Do the requirements for a photograph and address on the credential and the DMV employee background check erode privacy.

The REAL ID method will extend the life and legitamacy of the Social Security Number as a national ID number.

The DHS PIA document is exactly right when it states:

Some of the public concern about the REAL ID stems from the history surrounding the expansive use of the SSN beyond its original purpose of recording the information necessary to provide a public pension benefit.

The original purpose of the Social Security Number was to track taxation and payments for social programs under Roosevelt’s New Deal created in the 1930s following the Great Drepression.  These days the Social Security number is a de facto national ID number issued to all citizens and you really can’t do anything signifigant without it (i.e. get a job… unless your are an illegal immigrant.. i guess people in the US have privacy after all).  BTW - Collecting Social Security after age 65 is a joke… it is program that will not support the “baby boomer” (but that is a different issue all together). 

The DHS Privacy Impact Assessment goes through most general concerns the the REAL ID act posses to the privacy of U.S. citizens thoroughly…. except for one. Put on your tin-foil hats for this one.  The government works so closely with private companies (namely lobbyists pushing and paying for certain policies, bid and no-bid contracts, laws and regulations) that I believe that they would give out our con$olidated information for the right price. Realistically, a national database in some form or another already exists (social security).  But the REAL ID database would make it possible to have a REAL-time view of all transactions.

DHS PIA pg. 6: “financial institutions, retailers, hotels, health-care providers, and others may consider the REAL ID credential”. 

It sounds like the ultimate consolidation of all personal data.  It will merge your social, driver’s license, and possibly finacial and medical info. 

You see, the REAL ID system would not just be used in the police but with PRIVATE agencies.  On military installations you can’t do much of anything without a certain government ID card.  The data on this REAL ID will be the cream of the crop.  Particularly if is collects data on where you’ve been.  But conspiracy theories on new American corporate facism aside, people need to know that this is happening.  A wake up is long over due for Americans.  I just hope this cancerous apathy doesn’t kill the priciples of the country I love.

Check out the last line of the DHS Privacy Impact Assessment:

The public is encouraged to comment on the NPRM and on the privacy issues associated with implementation of the Act in order to ensure that the final rule reflects robust public input on these important issues.

Links:

Facial Recognition to deter ID Theft

DHS Privacy Impact Assessment REAL ID Act - Chief Privacy Officer, DHS

Four State Oppose RealID (New Hampshire, Oklahoma, joined Montana, Washington - as of 10 Jun 2007)

(New Hampshire, Oklahoma, joined Montana, Washington - as of 10 Jun 2007)Ron Paul oppinion on Amnesty for illegal immigrants and the National ID

(New Hampshire, Oklahoma, joined Montana, Washington - as of 10 Jun 2007)

(New Hampshire, Oklahoma, joined Montana, Washington - as of 10 Jun 2007)New World Ord… I mean other things that didn’t make it into the REAL ID ACT:

(New Hampshire, Oklahoma, joined Montana, Washington - as of 10 Jun 2007)

(New Hampshire, Oklahoma, joined Montana, Washington - as of 10 Jun 2007)

Original legislation contained one of the most controversial elements which did not make it into the final legislation that was signed into law. It would have required states to sign a new compact known as the Driver License Agreement (DLA) as written by the Joint Driver’s License Compact/ Non-Resident Violators Compact Executive Board with the support of AAMVA which would have required states to give reciprocity to those provinces and territories in Canada and those states in Mexico that joined the DLA and complied with its provisions. As a part of the DLA, states would be required to network their databases with these provinces, territories and Mexican states. The databases that are accessible would include sensitive information such as Social Security numbers, home addresses and other information. The foreign states and provinces are not required to abide with the Drivers Privacy Protection Act (DPPA) and are free to access and use the sensitive information as they see fit.  - REAL ID wiki

The UK is fighting the same battle of liberties

If I trusted the government, I suppose this would not be that big a deal.

Bonus: Total “Terrorism” Information Awareness - TIA 

 Multiple standardized computing environments can be monitored and controlled using Open Grid Service Architecture (OGSA).  If the federal government is not using this technology togather data from the DMV systems I would be very surprised.

 

 

 

 

Popularity: 5% [?]

Check out this ATM Theft

December 15, 2006

In the first picture you see an individual who apparently is making a bank transaction at the ATM.

ATM Theft

Popularity: 2% [?]

Your Social Security Number is sent all over the world

June 19, 2006

From SmartMoney.com:

Outsourcing to IndiaOnce a county's records are digitized, it's very easy — and incredibly cheap — for data compilers like Axciom and DataTrade to purchase the files and sell them to information brokers like Choicepoint, says Bloys. That's because under most states' Open Records laws, counties cannot charge more than the cost of copying the documents — which means a computer disk containing 10,000 records can be had for as little as a few dollars. What's more, Bloys explains, the companies that actually scan the documents for the county — the so-called wholesalers — often ship the images to foreign countries, like India or China, where outsourcers index the records much more cheaply than could be done in the United States. “[Our public information] is being distributed instantly all over the world,” says Bloys.

Smartmoney did an article featuring B.J. Ostergen.  I've been trying to get an interview with B.J.  But she is no doubt busy with the big boys. 

Ostergren has made it her full-time job as the founder of Virginia Watchdog to alert legislators and the general public about what's out there. “It's dangerous, and it's just reckless of those clerks to have these records online,” she says. According to a November 2004 report by the Government Accountability Office, as many as 28% of U.S. counties post their records — including people's Social Security numbers — on the Internet.

No cries of outrage, not even a peep from the American public about this.  More than likely it is because they don't know about it.  I guess they'll find out when someone steals their Identity and destroys their credit.

Popularity: 2% [?]

U.S. Privacy Commissioner

June 17, 2006

I am not a big Hilary fan, but I can get behind this. Senator Clinton urged creation of a “privacy bill of rights” Friday to protect people's personal data.

read more

Dr. Ann Cavoukian is the Information & Privacy Commissioner of Ontario and Jennifer Stoddart is the Privacy Commissioner of Canda.  Why don't we, the American people, have someone like this protecting our right to privacy? 

What does a Privacy Commissioner do:

Digital Right Management (DRM) issues 

Challenging privacy laws (sucha as Ontario's Adoption Information Disclosure Act)

Issues involving ID Theft

*ID Theft is America's fastest growing crime.

 

The U.S. is Governing Against the People

The people we elect into office are supposed to work for US.  The officials that we have elected are being wreckless with our rights.  There is no representatives to argue on our behalf.  There are a few organization that have stepped up to the plate such as the ACLU and EFF. 

Unchecked laws, such as the USA Patriot Act, allow agencies to have complete free run of over our civil liberties.  Even though there are helpful aspects of the Patriot Act (such as the ability of domestic and internationally focused agencies to communicate with each other), it does have provisions that seemed to slip through the cracks.  Frankly, with the current world wide hate of the United States (brought on by the current administrations foreign policies) some sort of action must be taken to protect U.S. citizens.  But I don't believe this must be done at the expense of freedom.  And if it is, the very thing that we fight for has been successfully removed… if our liberties are taken away, we have already lost all future wars to 'protect our freedom'.

Our country is run with checks and balances.  But there is currently no governing body in the way of special interest group lobbyists and policy makers who do not seem to care about our rights to privacy.  Elected officials seems drunk on greed fueled by the money that they get from lobbyist.   

VOIP Wiretapping

Government Want Search Engine/ISP records

Net Neutrality (Verison and other ISP lobbyiest want to kill the freedom of the Internet) 

Local American Counties Putting Personal Data Online:

http://www.smartmoney.com/consumer/index.cfm?story=20050303

 

I repeat it over and over on what Ben Franklin said centuries ago about the balance of freedom and security:

The man who trades freedom for security does not deserve nor will he ever receive either.”

Popularity: 2% [?]

More of your information might be online than you think

June 14, 2006

“If you are worried about a thief stealing your identity, it's not your wallet that needs guarding — it's your state and local governments.”

The “Virginia Watchdog” has raised security/privacy consciousness 10 fold.  Her name is BJ Ostergren she runs www.TheVirginiaWatchdog.com

She is a heroine for modern privacy concerns.  The Virginia Watchdog is attempting to save what is left of our privacy by getting in the face local politicians. 

Check out her interview with CNN and the Washington Post.

While there are some reactive and proactive measure that you can take to guard against ID theft, it is a bit disconcerting to think that no matter how many bank statements and bill invoices you shred all your data can be stolen from an office like the DMV or VA that has all of your personal information. 

It is bad when government employees lose a database of personal records but in my opinion it is much worse if they make your social security number public on purpose.

“Public records laws were designed to shed the light on government activities, not our personal information,” said Kerry Smith, an attorney with Public Interest Research Groups, a coalition of state consumer advocacy organizations. States are “clearly not striking the right balance when they release our Social Security numbers — the key to our financial identity — to commercial data brokers and anyone with access to the Internet.”

The major move of hard copes to softcopies came from a string of laws that were set forth in the 90's:

Government Paperwork Elimination Act in 1998

Clinger-Cohen Act of 1996

Paperwork Reduction Act

Federal, state and local government agencies have complied the paperless government laws.  Now those electronic documents are finding their way on Internet.  These documents include mortgage, tax and property anything you might find as the County Clerks office.  The data (a portion of your digital signature: name, DOB, SSN) is (in some cases) being bought and sold to the highest bidder.

 

http://www.opcva.com/WATCHDOG/index.html

read more | digg story

Popularity: 2% [?]

Strategies To Protect Yourself Against Identity Theft

June 7, 2006

Identity theft is a serious crime that is growing each year. If you're
a victim of identity theft you may spend months, even years, trying to
repair a ruined credit history. A seriously damaged credit report can
compromise your chances of getting a new job, a bank loan, insurance or
even rental housing. It's even possible to be arrested for a crime you
didn't commit if someone else has used your identity to break the law.

Unfortunately, many of the methods that thieves use to steal
identities are beyond your control to guard against. Although it's
rare, even store clerks have been known to use their position to pass
along information to identity thieves. There are some measures you can
take, however, that will make it harder for a thief to steal your
identity.

Protect Your Credit Card Number When Making Purchases

After you make a purchase and your credit or debit card has been
swiped through a credit card terminal, check to make sure that the
printed receipt hides all but the last 4 digits of your credit card
account number (usually there will be Xs in place of the first 12
digits). Some terminals still print receipts that show all 16 digits of
an account number, and may even include the expiration date as well.
After your card is swiped, you're permitted by law to hide the first 12
digits of your account number on the copy of the receipt that the
vendor keeps. Use any marking pen that will do the job.

When you go to a restaurant, it's especially important to make sure
that the first 12 digits of your credit card number are hidden on your
receipt. You might be in the habit of signing it and then leaving the
restaurant's copy on the table after your meal. An identity thief can
easily steal the signed receipt before the waitperson comes back around
to pick it up from the table. Don't take any chances.

Do You Really Need To Give Your Social Security Number?

Another important way that you can guard against identity theft is
to avoid giving out your social security number unless it's absolutely
required. Although you need to share your social security number when
you apply for credit or for a bank account, sometimes a store or an
organization will want to use it as an ID number, simply to identify
you within their system. This is a common practice even though the law
says that social security numbers aren't to be used as ID numbers. In
these situations, use your judgment. There's usually an alternative if
you ask.

Destroy Documents That Contain Sensitive Personal Information

Buy a paper shredder and use it to destroy documents you're
throwing away which contain personal information such as credit card
numbers, social security numbers, phone numbers and dates of birth.
This is important to do both at home and at work. Identity thieves
aren't above going through someone's trash to find valuable personal
information that can help them obtain credit in your name.

If The Worst Happens

If you do become a victim of identity theft, take the following steps immediately:

  • Contact your credit card companies, close your accounts and ask to have new cards issued to you.
  • Place a fraud alert on your file with any one of the three major credit bureaus. The other two will be notified automatically.
  • File a police report. You may need it to show to creditors as proof of the crime.
  • File a complaint with the FTC, which maintains a database of
    identity theft cases used by law enforcement agencies for their
    investigations.

Popularity: 1% [?]

Debit card crime ring BUSTED!

March 14, 2006

Law enforcement officials in New Jersey have arrested 14 people in connection with a crime spree that has forced banks across the nation to replace hundreds of thousands of debit cards.

read more | digg story

Popularity: 2% [?]

Fingerprint Payment System Becoming a Reality.. privacy issues

October 5, 2005

O.k.  Imagine walking into WalMart, gathering $10 in groceries and then instead of swipping your card, you press your finger in to a finger sized scanner. 

German grocery chain Edeka introduced a new method of pay system, the so-called 'digiProof' late in 2004 and into 2005.  And now an American company called Pay By Touch is doing the exact samething.   

A San Francisco start-up, Pay By Touch Solutions, is expected to announce today $130 million in fresh financing for a novel way of paying for groceries and other goods and services: a machine that reads your fingerprint.

This is very Cyberpunk.  Depending on the implementation, this may even be more difficult for ID Theft criminals to take advantage of.  If everything goes in that direction, house hold phones could actually get the devices and you could make authenticated bill payments from your house and get rid of all your credit cards.     

Then again since the fingerprint is translated into a number, I imagine criminals could still get ahold of the information the traditional way (unless the number can only be accessed with the original persons print):

Here's how it works: Customers sign up once, by registering a checking account or a credit card, and showing government identification such as a driver's license. The Pay by Touch technology records the lines and ridges of their fingerprints, and translates the data into a numerical algorithm that is stored in a secure database. The customers thereafter never have to carry a wallet or purse back to the store, and can use their finger to pay for goods across the Pay By Touch network, which now includes stores in 10 states.

The capital raised — $55 million of it in convertible notes and $75 million in loans — will help the company build out its finger-reading payment systems at several nationwide retailers, including in California in the first quarter of next year.

This may also be a much better way to track people by there fingerprints and accounts.  Could this raise privacy issues?!  After all, fingerprints could link criminal records if you have any.  And wasn't there something in the bible about this…?  Oh, no.. that was 666.

It may be harder to hack but it will eventually be broken.  But that doesn't mean its no good.

read more | digg story

Popularity: 2% [?]

Anatomy of A PayPal Identity Theft Scam - The 7 Warning Signs

October 4, 2005

Paypal is becoming the online payment processor of choice for many users. Paypal allows virtually anyone to except credit card payments. Paypal is also a great way to send and receive electronic payments. Unfortunate fame has it's price and in the case of Paypal that means scam artists preying on the Paypal members

The Most common Paypal Scam Involves E-Mail, You will receive an E-mail from Someone claiming to be Paypal requesting you Verify your Information. That is Warning Sign 1 Paypal will never send you an E-Mail Requesting Your Personal Information

Often this E_mail will be sent to an E-Mail Address that is not the same one that Paypal has on File. That is Warning Sign 2

The Third Warning Sign is forged Headers (From Address). This is often hard to detect without knowledge of the Internet. Many Spam filters are now setup to block E-mail that has forged headers. Ask your E-mail provider how you can block Forged Headers.

The Fourth Warning Sign is the Greeting says something like Dear Paypal user or Paypal Member. Paypal knows who you are they will use the name you registered with.

The Fifth Warning Sign is the threat. The E_mail will threaten to suspend your account if you don't take immediate action.

The Sixth Warning Sign is a Non Secure Page. If you do click on the link in the E-Mail you will not be on a secure Page, No Https in the URL and no little Padlock in the lower left hand corner of your browser.

Bad Grammar or Misspelled words in the

If you receive an E-mail from Paypal with even 1 of these warning signs more likely then not it is a scam. Forward the E-Mail to Paypal and ask for assistance if you have any doubts.

Don't let these modern day thieves keep you from go about your every day life. Life is a risk the key of course is to do all you can to protect yourself and still enjoy life.

About The Author:
Mike Makler has been Marketing Online Since 2001 When he Built an Organization of over 100,000 Members

Get Mike's Newsletter:
http://ewguru.com/newsletter

More Articles by Mike:
http://ewguru.com/tips

Permission Based E_Mail Marketing Methods
http://ewguru.com/hbiz/amazingoffer.html

Popularity: 4% [?]

Next Page »

Bottom