Questions tagged [identity-theft]

Identity theft is the act of impersonating someone else on a computer system, for malicious purposes - i.e. without their knowledge or consent.

Filter by
Sorted by
Tagged with
0
votes
0answers
52 views

Can a remote user (logged into my computer via LogMeIn) capture my password as I log into a website?

I work for a large company with IT support that uses LogMeIn to take control of our PCs when troubleshooting. Today while being assisted I was asked to log into an internal website during a LogMeIn ...
0
votes
1answer
61 views

Can Identity Theft Protection Services Get Hacked?

I recently was dumbfounded by a question whether identity theft protection services can get hacked. Me and my family we're T-Mobile customers in the US and after the recent T-Mobile hack we got free ...
0
votes
0answers
45 views

Identity theft of biometric data from hardware security key?

My question is about identity-theft vulnerabilities of data on hardware security keys [also called: "hardware security token", "hardware token", "hardware authentication ...
0
votes
1answer
121 views

Is an owned domain + self hosted email the closest to owning one's online identity? Are there better alternatives?

Most online accounts identify users using email/phone & password; but since most all email/phone is handled by another service (e.g. Gmail), one's online identity only exists so long as these ...
2
votes
0answers
126 views

Send a Picture of my ID and a selfie of me holding it to a Questionable Website

Some website asked for the verification of my identity to make a purchase of online goods. I didn't think twice and send them a picture of both sides of my country's ID (not USA) and a selfie holding ...
1
vote
1answer
73 views

Mitigating physical cookie theft

Threat model: Malicious user gaining physical access to browser cookies (e.g., 3rd party repair guy copying cookies to his own device or something like that). Let's say legit user did not clear ...
3
votes
1answer
165 views

Nonprofit organizations asking me to email them a photo of my driver's license

Recently I've had two nonprofit organizations ask me to email them a photo of my driver's license. No money is changing hands, and both of these are legitimate and well-known nonprofits. Organization ...
1
vote
2answers
134 views

Can a fingerprint be reconstructed from a device that uses it for authentication?

I've noticed a lot of phones (not to mention, other devices) have built in fingerprint sensors these days. Do these devices store information in such a way that your fingerprint could be reconstructed ...
7
votes
1answer
283 views

Found fake Facebook profile with my name and education history, what to do?

A family member of mine called my attention to a Facebook profile with data significantly resembling mine: Matching first and last name Matching city Matching secondary school Matching university ...
0
votes
0answers
100 views

Risks of Providing a Passport Number

Company A pays company B for enterprise software. Company A hosts it internally. An employee from company B needs access to servers at company A in order to manage said software Company A is ...
1
vote
1answer
116 views

Protecting a website from being kidnapped

I have a MediaWiki website in Hebrew; As common with MediaWiki websites, it has lots of content and rebuilding it in case of a disaster isn't feasible. I chose to give that website a Global TLD (a non ...
0
votes
1answer
75 views

Is there any reasonable argument against immediately validating a new customer's email address? [closed]

Would it not be useful for account providers that allow online/phone signup/ordering to immediately verify the email address supplied to them? I was forced to ponder this recently when I became the ...
0
votes
1answer
153 views

Sending credit history report to potential landlord

I have a credit report from TransUnion that contains: My real name, current and past addresses Current and past credit card accounts, last 12 monthly balances and payments My past mortgage Past ...
1
vote
1answer
157 views

Samba and verifying server identity

Suppose that I have two Windows 10 (Professional edition) computers, one (PC) sharing a folder and second one (notebook) copying data to the shared folder automatically. I would like to prevent ...
0
votes
2answers
93 views

Can National Insurance number and Unique Taxpayer Reference be stored unencrypted in a database?

Should these details be stored encrypted, not at all or in plain text in a database? These are both UK terms, used to identify individuals to the tax authorities; the NI number is used more widely, ...
0
votes
1answer
127 views

BitFinex unauthorized login [closed]

A few minutes ago i got an email from the real Bitfinex, saying that a unauthorized login attempt was approved by Bitfinix. Is this the work of a new breach? The IP is located somewhere in Japan.
1
vote
4answers
352 views

Collecting banking, credit-card statements from users

I want to build a service that collects user spending history with their permission. Users would send over (banking, credit card) account statements and I would extract, store the following ...
1
vote
5answers
238 views

Potential Risks Using Reference Code Based Authentication For Web Based Application Form That Contains SSN

I'm currently building a web based membership application form that will require a user to enter an SSN and other identifiable information. Part of the requirements of the membership application is to ...
2
votes
1answer
16k views

Car registration paper stolen from glovebox, what kind of scams are possible?

I carelessly left my car unlocked, and it was searched by trespassers in the night. They only took the registration and insurance card (Ohio, United States). This seems strange to me, as these ...
5
votes
2answers
195 views

Is a company's dark web search really effective at proving my info is not there?

Prompted by this question. My take is that the security companies and banks that offer identity protection services use the phrase "dark web" as a scare tactic to get you to subscribe. And then when ...
2
votes
1answer
61k views

Bogus Instagram account using my email, never been verified, has over 1000 followers

This appears to be a phishing scam like I've never encountered before. I received an email from security@mail.instagram.com to an email address I rarely use, but I noticed it because messages get ...
21
votes
7answers
8k views

Unexpected email from Yorkshire Bank

I have started receiving unexpected emails from Yorkshire Bank. I have never been a customer. I don't recall applying for any of their products either, although maybe I did many years ago. The ...
-1
votes
3answers
1k views

I entered my password in a possible scam website. What should I do?

A while ago, I found a website that said that it will pay up to 100$ an hour just to watch ads. So, I thought what's the harm, and I created an account using a fake Facebook account (with my real ...
0
votes
1answer
109 views

Is there a security risk in using the same profile picture on different sites?

Well, the title basically says it. I'd suppose that using the same profile picture on unrelated sites would allow anyone to do a quick Google image search and therefore associate the profiles with ...
0
votes
0answers
402 views

How to store SSN in asp.net web-based application on a short-term basis?

After scouring the web to find countless similar questions, I still find it important enough to ask based on my client's specific requirements. Now I know most if not all are not a lawyer, but if you'...
23
votes
6answers
7k views

How to be mean to some people that stole my phone [closed]

My iPhone was stolen a couple of weeks ago and I started receiving the following messages on my recovery secondary number that I provided with Find My iPhone: The URLs are: https://apple.inc-view.us/...
4
votes
4answers
157 views

What is a simple and secure method to transfer virtual assets?

Consider a MMORPG where users own virtual assets like magical swords or rings that can be used by the player. This system needs a safe method for transferring assets from Alice to Bob. One ...
1
vote
0answers
248 views

How dangerous is it to verify my account with a photo of my visa, passport, or ID card? [duplicate]

In order to play poker online on some accounts you have to verify your age and identity. And to do that, I need to email the site with a picture of my visa or passport or ID card. How dangerous is it ...
3
votes
1answer
158 views

Is it risky to install a theft-protection system?

I recently bought a Dell laptop and found out that Dell recommends to install a theft-protection system called LoJack. It is a system installed on the BIOS; if the laptop is stolen, it is possible to ...
1
vote
0answers
45 views

Security concerns in cookie exporting between browsers

I'm wondering why Facebook is not handling the cookie export between browsers and related security concerns. This will be worst when they are using the "remember me" option as the cookies will be ...
3
votes
2answers
146 views

Email/facebook account/internet protection service for private community

I apologize in advance for any inaccuracy. I am part of a yoga community which has no particular activity on the web or in the informatic sector. All we have that can be regarded as web-related is ...
150
votes
12answers
27k views

Do I need to encrypt connections inside a corporate network?

Provided that I have a decent level of physical security in the office, I monitor the physical addresses of devices connected to the network and only give VPN access to trusted parties, do I need to ...
19
votes
4answers
931 views

Help! My information has been stolen! What do I do now?

This is an attempt to ask a canonical question to expand upon another post with a similar name. The goal is to create something helpful that can be used as a duplicate when non experts ask about ...
-4
votes
1answer
153 views

what if someone has my wrong social security number? [closed]

If a thief gets ahold of my name and address, but has the wrong social security number, (say it's off by one digit) will this protect me? They may try to open an account in my name, and there's a ...
2
votes
0answers
74 views

On a server I run, bogus incoming mail for a username which is my name. Should I be worried?

A server I run has a minimal public-facing mail exposure, running postfix on port 25 (no authentication on this port; IMAP is accessible by other means). In my mail logs it is not uncommon to find '...
5
votes
1answer
975 views

Why would a stranger keep signing up to trading sites with my email address?

I have read the answer below and understand that there is not much I can do about the basic problem of somebody signing up for newsletters and online services using my email address: Someone used my ...
27
votes
3answers
6k views

Another domain is using our web app's IP address. How to prevent it? [duplicate]

Our web application is being mimicked by another domain, https://www.djjpl.com.sg. On ping, it gives the same IP address as ours. Every git push to our server reflects on that domain. We want to stop ...
2
votes
3answers
249 views

Should it remain as a general advice to encrypt the whole HDD?

AFAIK, the general advice is to encrypt the whole HDD or at least the whole /home partition (and its Windows equivalent), because nowadays computers tend to store lots of personal, sensitive ...
4
votes
1answer
52k views

What can be done with the last 4 digits of one's SSN [closed]

If a hacker were to get the last 4 digits of your SSN (and maybe some other info like name, etc), what could they do? To avoid the possibility that they could guess the other digits from date/...
5
votes
2answers
390 views

Someone has registered my partner's recycled email account

My partner has a unique name, and while we can't truly be certain, we're almost 100% sure she is the only one in the world with it. Once upon a time she had a Hotmail account with her name as the ...
1
vote
2answers
214 views

What is the safest way to identify a device without human action please?

I want to allow users of our website to restrict access to their account from devices they have explicitly authorized. This will be checked at the connection and each time the IP address changes. To ...
0
votes
1answer
394 views

Does changing one's last name offer some protection against identity theft

With the recent hack at Equifax where names, addresses, SSNs, etc are now likely in the hands of criminals, would changing one's last name be protective from impersonation similar to how one would ...
5
votes
1answer
464 views

Can a Bitcoin Seller steal my Identity?

I was trying to buy some bitcoins on https://localbitcoins.com. However, the seller was looking for a copy of my ID and a photo of my debit card (long number covered). I'm curious as to how open ...
4
votes
2answers
206 views

How big a vulnerability is phone number theft and how to protect against this? [closed]

This interesting article in the NYT discusses how attackers are stealing phone numbers of their intended victims by phoning up Verizon, AT&T, etc., giving them a sob story about an emergency and ...
-1
votes
3answers
90 views

Securing Domain Names for Resell [closed]

Is there any reason to why there cannot be a rule/law that prohibits the securing of domain names for resale? E.g A new acquired domain must have a running website within say 1 year or 6 months ...
3
votes
3answers
3k views

Can screen blue light filter applications on android steal passwords?Do these filter apps see everything that I type?

I have seen that android does not allow installation of any apk when screen filters are enabled.Do they cause any security risks?
3
votes
4answers
21k views

Is it dangerous for a scammer to know just your name and birthday? [closed]

Basically, this afternoon, I got a call that I had picked up. The caller asked for (my name) stating that they were from this company associated with my healthcare. The call seemed pretty legit, and ...
10
votes
1answer
912 views

Implications of prominent *secure messaging apps* requiring phone number identifiers

More specifically and also generally than this related question, I'm curious about the privacy implications of prominent secure messaging apps (marketing themselves as protecting users' privacy) ...
2
votes
0answers
84 views

Security implications of owning a German electronic ID card

I am German and about to renew my ID card. Since around 2010, the new ID cards contain an electronic chip that can be used for e.g. online authentication. If I understood the documentation correctly,...
0
votes
2answers
219 views

I can send an email from your email account without your permission. How is this possible? [duplicate]

Similar question with an amazing answer: How can PayPal spoof emails so easily to say it comes from someone else? I hope that the title to this question is actually a lie... but, to my knowleage, I ...