Date of Birth Requirement

[onecoop]

Hi Guys,


just a suggestion from someone who works in IT Security, making date of birth a requirement for forum membership is not a good idea.

Ive seen plenty of forums get hacked over the years and DOB is one of the key things that people use for identity theft. So in the likely chance that someone hacks this forum in the future, and grabs data from the members tables thats a real risk to members. The other option is everyone should do as I have and use a similar but incorrect DOB.

[flipfire]

Dob is optional.

and no one puts their real dob anyway.

[INVSBL]

dude, my DOB is on my myspace/facebook. along with heaps of others.
sif some1 is gonna hack ozhomo for some dob things........

[onecoop]

INVSBL I work for the company that advises facebook on their network security, and believe me, that is definitely not a place you want to post your real DOB.

Someone wouldnt hack the forums for personal data no, that would just be a side effect of things

[INVSBL]

can u please tell me what some1 can do with my last name, my date of birth, and crappy photos of my face???

[aaronng]

Date of birth is optional. I usually just put 1/1/01

[onecoop]

INVSBL, your last name, your email address, your DOB etc etc.
Add that to info in your facebook account and soon enough someone has enough info to ring your bank and pretend to be you.

not being paranoid or anything but identity theft is a bitch. Once someone sets up a few things in your name its hell on earth trying to get stuff sorted, because who is the real you

[bennjamin]

appreciate your concern , onecoop. At the end of the day it is up to the end user to provide or omit such real details and ultimately prevent or alter future crime.

[INVSBL]

INVSBL, your last name, your email address, your DOB etc etc.
Add that to info in your facebook account and soon enough someone has enough info to ring your bank and pretend to be you.

not being paranoid or anything but identity theft is a bitch. Once someone sets up a few things in your name its hell on earth trying to get stuff sorted, because who is the real you

ok kool,
good thing is, i dont hav a credit card.
and my email adress is an old arse msn one, that no bank should accept.
and the only personal stuff on facebook is my prior jobs and wat uni i go to....

and getting things sorted....
hmmm if i rock up to a bank with my passport, and other id thing, im sure i can get anything sorted.

but thanks for the heads up anyways.

[flipfire]

I usually put a leap year date since it only exists every 4 years.

But yea i do agree. Name, Dob, email address is enough for a fraud to work on and cross reference elsewhere, youll be surprised. If they know someone or have access to a nationwide database like a telecom company or credit bureau, then your screwed since name and dob is enough to identify a person. Mainly wealthy people get targeted though.

[aaronng]

I usually put a leap year date since it only exists every 4 years.

But yea i do agree. Name, Dob, email address is enough for a fraud to work on and cross reference elsewhere, youll be surprised. If they know someone or have access to a nationwide database like a telecom company or credit bureau, then your screwed since name and dob is enough to identify a person. Mainly wealthy people get targeted though.

You also need the account number of the bank/phone/credit, which is not impossible to obtain. Just "collect" someone elses mail.

[zco]

can u please tell me what some1 can do with my last name, my date of birth, and crappy photos of my face???

i'll give you an example
you'll sell your car online,
you'll put your mobile number up for call, i have your last name
your address is easily found out, or even if you meet someone at home for inspection of vehicle

your bank account details can be obtained from a previous transaction you've sold online, or i can ask for your bank account details for me to "transfer a deposit into your bank account for you" showing you that i will purchase the car.. something small say 250dollars

the money goes through . clears in your account. i tell you i'll pick up car next weekend.

during the week, i ring the your bank. hello, my name is mr invisbl, my surname is this. my dob is this. my telephone number is this
i live at this address. i have recently deposited money into my bank account of 250dollars last weekend.

i need a password reset and also username for logon ID for internetbanking. cheers