Questions tagged [identity-theft]
Identity theft is the act of impersonating someone else on a computer system, for malicious purposes - i.e. without their knowledge or consent.
117
questions
0
votes
1
answer
73
views
sealed data from a stolen laptop
Is there a way to force google drive to erase all files + passwords contained on a computer at shutdown (as a proactive measure)? Or this could be accomplished by a standard script to delete all cache ...
0
votes
1
answer
378
views
Fraud Detection - 2FA Bypass Methods and SIM Cloning
I am assisting another Data Scientist with helping a bank detect and prevent fraud via data analysis and predictive modeling (Machine Learning). It's a challenge because the proportion of known ...
- 203
0
votes
0
answers
59
views
Is it safe to send my id photo for verification [duplicate]
Is it safe to send my ID photo and me holding my ID photo to a site(BitSkins). My intetions were to buy some skins for games, but they asked for verification so can they missuse my identity ?
- 1
2
votes
1
answer
138
views
What should I do if my sensitive information is potentially leaked?
I sold an laptop recently, but didn’t care to do a secure erase to make sure there wasn’t any data left. After a long time, I suddenly realized that I shouldn’t have be so careless and began to worry ...
- 23
0
votes
0
answers
137
views
Can a remote user (logged into my computer via LogMeIn) capture my password as I log into a website?
I work for a large company with IT support that uses LogMeIn to take control of our PCs when troubleshooting. Today while being assisted I was asked to log into an internal website during a LogMeIn ...
1
vote
1
answer
276
views
Can Identity Theft Protection Services Get Hacked?
I recently was dumbfounded by a question whether identity theft protection services can get hacked. Me and my family we're T-Mobile customers in the US and after the recent T-Mobile hack we got free ...
- 153
0
votes
1
answer
194
views
Is an owned domain + self hosted email the closest to owning one's online identity? Are there better alternatives?
Most online accounts identify users using email/phone & password; but since most all email/phone is handled by another service (e.g. Gmail), one's online identity only exists so long as these ...
- 141
2
votes
0
answers
256
views
Send a Picture of my ID and a selfie of me holding it to a Questionable Website
Some website asked for the verification of my identity to make a purchase of online goods. I didn't think twice and send them a picture of both sides of my country's ID (not USA) and a selfie holding ...
- 21
1
vote
1
answer
292
views
Mitigating physical cookie theft
Threat model:
Malicious user gaining physical access to browser cookies (e.g., 3rd party repair guy copying cookies to his own device or something like that). Let's say legit user did not clear ...
- 2,958
3
votes
1
answer
596
views
Nonprofit organizations asking me to email them a photo of my driver's license
Recently I've had two nonprofit organizations ask me to email them a photo of my driver's license. No money is changing hands, and both of these are legitimate and well-known nonprofits.
Organization ...
user51881
1
vote
2
answers
493
views
Can a fingerprint be reconstructed from a device that uses it for authentication?
I've noticed a lot of phones (not to mention, other devices) have built in fingerprint sensors these days.
Do these devices store information in such a way that your fingerprint could be reconstructed ...
- 201
5
votes
1
answer
368
views
Found fake Facebook profile with my name and education history, what to do?
A family member of mine called my attention to a Facebook profile with data significantly resembling mine:
Matching first and last name
Matching city
Matching secondary school
Matching university
...
0
votes
0
answers
325
views
Risks of Providing a Passport Number
Company A pays company B for enterprise software. Company A hosts it internally. An employee from company B needs access to servers at company A in order to manage said software
Company A is ...
- 1,213
1
vote
1
answer
168
views
Protecting a website from being kidnapped
I have a MediaWiki website in Hebrew;
As common with MediaWiki websites, it has lots of content and rebuilding it in case of a disaster isn't feasible.
I chose to give that website a Global TLD (a non ...
- 11
0
votes
1
answer
119
views
Is there any reasonable argument against immediately validating a new customer's email address? [closed]
Would it not be useful for account providers that allow online/phone signup/ordering to immediately verify the email address supplied to them?
I was forced to ponder this recently when I became the ...
- 9
0
votes
1
answer
2k
views
Sending credit history report to potential landlord
I have a credit report from TransUnion that contains:
My real name, current and past addresses
Current and past credit card accounts, last 12 monthly balances and payments
My past mortgage
Past ...
- 103
1
vote
1
answer
352
views
Samba and verifying server identity
Suppose that I have two Windows 10 (Professional edition) computers, one (PC) sharing a folder and second one (notebook) copying data to the shared folder automatically. I would like to prevent ...
- 13
0
votes
2
answers
215
views
Can National Insurance number and Unique Taxpayer Reference be stored unencrypted in a database?
Should these details be stored encrypted, not at all or in plain text in a database?
These are both UK terms, used to identify individuals to the tax authorities; the NI number is used more widely, ...
- 1,187
0
votes
1
answer
174
views
BitFinex unauthorized login [closed]
A few minutes ago i got an email from the real Bitfinex, saying that a unauthorized login attempt was approved by Bitfinix. Is this the work of a new breach? The IP is located somewhere in Japan.
1
vote
4
answers
499
views
Collecting banking, credit-card statements from users
I want to build a service that collects user spending history with their permission. Users would send over (banking, credit card) account statements and I would extract, store the following ...
- 2,169
1
vote
5
answers
341
views
Potential Risks Using Reference Code Based Authentication For Web Based Application Form That Contains SSN
I'm currently building a web based membership application form that will require a user to enter an SSN and other identifiable information. Part of the requirements of the membership application is to ...
- 1,349
2
votes
1
answer
19k
views
Car registration paper stolen from glovebox, what kind of scams are possible?
I carelessly left my car unlocked, and it was searched by trespassers in the night. They only took the registration and insurance card (Ohio, United States). This seems strange to me, as these ...
- 131
5
votes
2
answers
272
views
Is a company's dark web search really effective at proving my info is not there?
Prompted by this question. My take is that the security companies and banks that offer identity protection services use the phrase "dark web" as a scare tactic to get you to subscribe. And then when ...
- 443
3
votes
1
answer
64k
views
Bogus Instagram account using my email, never been verified, has over 1000 followers
This appears to be a phishing scam like I've never encountered before.
I received an email from [email protected] to an email address I rarely use, but I noticed it because messages get ...
- 33
21
votes
7
answers
8k
views
Unexpected email from Yorkshire Bank
I have started receiving unexpected emails from Yorkshire Bank.
I have never been a customer. I don't recall applying for any of their products either, although maybe I did many years ago.
The ...
- 343
-1
votes
3
answers
2k
views
I entered my password in a possible scam website. What should I do?
A while ago, I found a website that said that it will pay up to 100$ an hour just to watch ads.
So, I thought what's the harm, and I created an account using a fake Facebook account (with my real ...
0
votes
1
answer
242
views
Is there a security risk in using the same profile picture on different sites?
Well, the title basically says it.
I'd suppose that using the same profile picture on unrelated sites would allow anyone to do a quick Google image search and therefore associate the profiles with ...
- 1,129
0
votes
0
answers
657
views
How to store SSN in asp.net web-based application on a short-term basis?
After scouring the web to find countless similar questions, I still find it important enough to ask based on my client's specific requirements. Now I know most if not all are not a lawyer, but if you'...
- 246
23
votes
6
answers
7k
views
How to be mean to some people that stole my phone [closed]
My iPhone was stolen a couple of weeks ago and I started receiving the following messages on my recovery secondary number that I provided with Find My iPhone:
The URLs are:
https://apple.inc-view.us/...
- 359
4
votes
4
answers
212
views
What is a simple and secure method to transfer virtual assets?
Consider a MMORPG where users own virtual assets like magical swords or rings that can be used by the player. This system needs a safe method for transferring assets from Alice to Bob.
One ...
- 254
1
vote
0
answers
418
views
How dangerous is it to verify my account with a photo of my visa, passport, or ID card? [duplicate]
In order to play poker online on some accounts you have to verify your age and identity. And to do that, I need to email the site with a picture of my visa or passport or ID card.
How dangerous is it ...
- 11
3
votes
1
answer
219
views
Is it risky to install a theft-protection system?
I recently bought a Dell laptop and found out that Dell recommends to install a theft-protection system called LoJack. It is a system installed on the BIOS; if the laptop is stolen, it is possible to ...
- 1,105
1
vote
0
answers
99
views
Security concerns in cookie exporting between browsers
I'm wondering why Facebook is not handling the cookie export between browsers and related security concerns. This will be worst when they are using the "remember me" option as the cookies will be ...
- 11
3
votes
2
answers
190
views
Email/facebook account/internet protection service for private community
I apologize in advance for any inaccuracy.
I am part of a yoga community which has no particular activity on the web or in the informatic sector.
All we have that can be regarded as web-related is ...
- 133
150
votes
12
answers
28k
views
Do I need to encrypt connections inside a corporate network?
Provided that I have a decent level of physical security in the office, I monitor the physical addresses of devices connected to the network and only give VPN access to trusted parties, do I need to ...
- 1,451
19
votes
4
answers
1k
views
Help! My information has been stolen! What do I do now?
This is an attempt to ask a canonical question to expand upon another post with a similar name. The goal is to create something helpful that can be used as a duplicate when non experts ask about ...
- 7,692
-4
votes
1
answer
200
views
what if someone has my wrong social security number? [closed]
If a thief gets ahold of my name and address, but has the wrong social security number, (say it's off by one digit) will this protect me?
They may try to open an account in my name, and there's a ...
- 101
2
votes
0
answers
111
views
On a server I run, bogus incoming mail for a username which is my name. Should I be worried?
A server I run has a minimal public-facing mail exposure, running postfix on port 25 (no authentication on this port; IMAP is accessible by other means). In my mail logs it is not uncommon to find '...
user171561
5
votes
1
answer
2k
views
Why would a stranger keep signing up to trading sites with my email address?
I have read the answer below and understand that there is not much I can do about the basic problem of somebody signing up for newsletters and online services using my email address:
Someone used my ...
- 153
27
votes
3
answers
7k
views
Another domain is using our web app's IP address. How to prevent it? [duplicate]
Our web application is being mimicked by another domain, https://www.djjpl.com.sg. On ping, it gives the same IP address as ours. Every git push to our server reflects on that domain.
We want to stop ...
- 323
2
votes
3
answers
298
views
Should it remain as a general advice to encrypt the whole HDD?
AFAIK, the general advice is to encrypt the whole HDD or at least the whole /home partition (and its Windows equivalent), because nowadays computers tend to store lots of personal, sensitive ...
- 5,747
4
votes
1
answer
53k
views
What can be done with the last 4 digits of one's SSN [closed]
If a hacker were to get the last 4 digits of your SSN (and maybe some other info like name, etc), what could they do?
To avoid the possibility that they could guess the other digits from date/...
- 191
5
votes
2
answers
499
views
Someone has registered my partner's recycled email account
My partner has a unique name, and while we can't truly be certain, we're almost 100% sure she is the only one in the world with it.
Once upon a time she had a Hotmail account with her name as the ...
- 195
1
vote
2
answers
271
views
What is the safest way to identify a device without human action please?
I want to allow users of our website to restrict access to their account from devices they have explicitly authorized. This will be checked at the connection and each time the IP address changes.
To ...
- 157
5
votes
1
answer
535
views
Can a Bitcoin Seller steal my Identity?
I was trying to buy some bitcoins on https://localbitcoins.com. However, the seller was looking for a copy of my ID and a photo of my debit card (long number covered).
I'm curious as to how open ...
- 51
4
votes
2
answers
274
views
How big a vulnerability is phone number theft and how to protect against this? [closed]
This interesting article in the NYT discusses how attackers are stealing phone numbers of their intended victims by phoning up Verizon, AT&T, etc., giving them a sob story about an emergency and ...
- 41
-1
votes
3
answers
157
views
Securing Domain Names for Resell [closed]
Is there any reason to why there cannot be a rule/law that prohibits the securing of domain names for resale? E.g A new acquired domain must have a running website within say 1 year or 6 months ...
- 107
4
votes
3
answers
4k
views
Can screen blue light filter applications on android steal passwords?Do these filter apps see everything that I type?
I have seen that android does not allow installation of any apk when screen filters are enabled.Do they cause any security risks?
- 41
4
votes
4
answers
33k
views
Is it dangerous for a scammer to know just your name and birthday? [closed]
Basically, this afternoon, I got a call that I had picked up. The caller asked for (my name) stating that they were from this company associated with my healthcare. The call seemed pretty legit, and ...
- 41
10
votes
1
answer
1k
views
Implications of prominent *secure messaging apps* requiring phone number identifiers
More specifically and also generally than this related question, I'm curious about the privacy implications of prominent secure messaging apps (marketing themselves as protecting users' privacy) ...
- 1,965