sprkyco

So apparently there may be a loophole (info acquired from wikipedia confidence == low) The SSN wikipedia page at the very bottom mentions that SSN's used in advertising are considered invalid.

Possible solution advertise all SSN's in card format invalidate them all and force hand of government? Implausible but not improbable.

Or possibly advertise your own once it is known to be hacked...just throwing wet spaghetti at wall but there may be something that sticks.

SSN's are not considered secret pieces of information you could easily publish all SSN's loop{ xxx-xx-xxx//following ssn format }

However, when they are tied in with other identifying information this is when they become unique identifiers. The more associated information that is tied to the SSN the "more secure" the mechanism of identification is. I have noticed this proposal of just not using SSN at all and incorporating something else. An alternative is the password which has been proven to not be the best case scenario as users pick easy passwords to remember. Then 2fa become popular and is becoming much easier to use. Then there were gaps in the sms or voicemail method of 2fa. My point being that no matter the mechanism put into place to uniquely identify an individual there is no silver bullet. The more layers a company adds on the better. Not to say I support HIPPA or any other archaic legislation (PCI etc) these organizations are tasked with instituting laws or guidelines that are being outdated as fast as they are implemented and are required to make it as reasonable for every entity that is covered under these laws.

This may be a blessing in disguise as it seems that a deluge of phishing attacks ensued, obviously, after this announcement. Whether or not the attacks are directly attributed to leaked information or the attributed party. Be vary wary of any emails that anyone does or has received.

The site does not make it clear that " this is no more in-depth than codecademy or code.org free tutorials." On the contrary the site pulls in data regarding salaries and time commitments that are completely unrealistic from the standpoint of someone who has "experience" These are all classical signs of a scam. Product x does amazing things for only the price of y trust me I know I needed product x that is why I made it.

Yeah that's really awesome hope we see more things like this, but this situation is hopefully not common and just something that "slipped through the cracks". The work that has been done deserves more attention and resources than it has ever received.

To add to this a bit searching for 'security' jobs at anthem only reveals 12 jobs which to me seemed rather low.

Had never really thought of that angle. Being a father it does shake me up a bit more than usual as it seems my peers and I are quite used to these headlines being the norm. Imagining a future in which you have already been "doxed" prior to elementary school is a bit disturbing.

Really hope this does not become a pattern of ever decreasing time expectations between learning to code and becoming employable. I attended an actual bootcamp and really still struggle to keep up with everything almost a year later (employed in infosec so somewhat development related). However a 30 day full time course load to go from almost no code background to employable, honestly sounds ridiculous.

Without googling around I found this link at the end of the story that validates, in my opinion, your misplaced concerns. http://icant.co.uk/ http://developer-evangelism.com/

It is interesting to see this reaction. In the US we have been paying for education for quite some time and the thought that it is a product and students the purchaser and benfactor of that product does not seem to be a very important topic rather it is met with some levels of resistance and blame on the students when "we" fail or otherwise complain about our educational experiences. Lots' of walking through snow uphill both ways reactions from professors and attendees of college/university.

Disclaimer: I am attending Park University online B.S. Information Computer Science doubtful anyone on HN would even consider this as a credential or a legitimate learning experience to offer insight on econ exams.

Going against the grain here I can understand the student's frustration when tests are implemented to establish a metric that is ultimately attached to a record of sorts and in some cases can affect the psyche of the student.

My example that is somewhat related was during a "Web Programming" course we were taught basic things like DHTML, CSS, JavaScript etc. All culminating in a final project of a personal website, nothing to difficult there.However due to the nature of online courses I had to take a test at a proctored location with a computer. One week prior to the exam being sent out instructor notified us that "Administration has mandated this to be a written test." This really threw my game off. I'm not sure any developers have ever tried "writing" a full webpage including CSS and Error checks for form fields on a sheet of paper but it definitely affected my performance on the test. During the class we it was in now way imparted upon us that writing code with a pencil would be our final artifact of having learned something in the course.

As much as I and many people I have met attribute intelligence to critical and problem solving skills. The reality of "normal" institutional teaching emphasizes the ability to take tests and remember data only dumping and moving on to another subject to repeat the process. The over arching theme, in my experiences, is that remembering and regurgitating topics in the course was/is the most rewarded endeavor. For some it is very difficult to escape this conditioning of remembering and studying material in order to get the right answers on a test with critical and problem skills existing only as a side effect of "learning".

Thanks for the reference schoen this is why I love HN. I sometimes have difficulty organizing thoughts into neatly categorized theories like this, best I can usually do is realize i'm sure somebody has thought about this before and explained better than I can.

It is interesting the contrast in cultures between developers and "hackers" it was not uncommon to hear about script kiddies picking up code and realizing later that a rm rf line was contained in the file. The common reaction to a scenario like that would be well the script kid got what he deserved. However, there is a fringe within that group that is more interested in testing these thing in VMs (so the damage would be minimal in that case). However when a security issue is brought to light like this and the only difference is the intentions of the user the arguments are so completely different. Script Kid downloads rm rf script and runs HAHA! Javascript Developer downloads package and runs blindly "well who let that happen and how do we stop it from happening again" hopefully some HN reader can respond to this to succinctly convey the philosophical mechanism going on here as I cannot quite place it.

GrammarNitpick: should be congratulates not congratulations

I had one experience in an "open office" for approximately six months. It was terrible, constant shuffling of people to acquire the plethora of free food available. Nerf Gun wars and the constant click clack of ping pong approximately 30 ft. away. This article has offered me some vindication in my distaste for the "open office".

I for one feel quite vindicated by this endeavor I attended a bootcamp in Pearland, TX and it was terrible. Luckily I was able to get a job later in a programming related field, but it was nonetheless a ridiculous and terrible experience. If anyone is interested in my experiences they are over at sprky.co I have also reached out to the other people from my camp that had a terrible experience. Overall I think the idea of coding bootcamps is on the right track and really hope to see it succeed. However the instance of what I went through has left a bad taste in my mouth.

There are some real gems in there. mentat.com and then there's entity.com a resume of sorts for Marty Connor who is now apparently the Corporate Operations Engineer at Google.

http://disqus.com/nihalsahu/ 14 years old and writing design patterns for PHP. My feelings of inadequacy cannot be put into text.

http://seclists.org/ is another great resource.

+1 for Knoppix used it to recover some design plans from a coworkers computer. The hdd was doing "the click of death" and Knoppix was still able to recover 90% of the data and 100% of the important stuff. Needless to say his backups are now in triplicates.

Luckily it does not work on my normal browser: https://www.whitehatsec.com/aviator/

That's awesome I cancelled my account last month due to the issue of "we are lowering prices for summer" me thinking naively that this meant eventually prices would go up after a month or two. However after receiving not only notification that the prices would not go up further (Houston drivers at a minimum) but also I would now be required to pay 10 dollars a week to maintain service. Prior to Uber I was thinking the sharing ecnonomy was an embodiment of a change in corporate attitudes. F me right?

tl:dr I'm a fanboy of Corkami and just wanted to show appreciation.

Ange Albertini does some amazing research and I was orginally introduced to his works after reading POC||GTFO from a Talk Travis Goodspeed gave. Recently Corkami did a giveaway on twitter for a signed mini-poster (Corkami's Posters are amazing as well highly recommended!) Fortunately I have a signed mini-poster en route to my mailbox cannot wait to have that thing framed.

Whitehat is not really looking for extensive security backgrounds for some of their positions. The best way to get in is to show how and why your interested in security. There are many sources to do this. Damn Vulnerable Web App, WebGoat, and Guyere are some available options to see if your really interested in security. I highly reccomend applying for the static code analysis position as a Java programming background would be instrumental in identifying vulnerabilities.

Sent you a jobvite for Whitehat Security scrap the whole free idea get paid to work at a really fun place and actually "hack".

For any history buff's out there I would be very interested in any instances the economics of a nation were as disparate as they are now and were able to stabilize to "normal" levels of inequality. The majority of instances that I was able to recall or search for were only instances when a revolution occurred in order to "stabilize" the inequalities rather than instances of rich individuals recognizing a problem and soap-boxing vague methods of rescue.

Just dropped Uber. Guess now I have to sign up for Lyft. These tactics seem very similar to the Hoffa era, really had high hopes for a sharing economy but things are escalating quickly to become similar to Hoffa era tactics. Minus the whole fighting for the middle class spirit.

This was a major part of Daniel Suarez's book the daemon really good read highly recommend. Automated motorcycles with blades doesn't get much better than that.

Forgot to mention: Tested via google+ and hangouts with above mentioned android version. No FB acccount or messenger on mine to test that app so cannot speak to it but it seems the method of mitigating this attack is built in to Android.

Well done I myself enjoy reading RFC's, but have yet to create something as crafty as this. Good work! Does not work on Android 4.4.2 requires application selection and then brings you to dialpad.