Hacker News new | past | comments | ask | show | jobs | submit login

> The primacy of the SSN in American society is idiotic. It's a "secret" that you have to hand out to dozens of different organizations

I'm not from the US. The first time i had an american friend explain me the SSN thing, I thought they were crazy, for the exact same reasons.

It is idiotic, as you say.

Here in my third-world country there isn't any number or code that I need to keep secret and I need to hand over to other companies at the same time.




If you don't mind me asking, because I'm genuinely curious how it works in other countries. Does your country have an equivalent of a 'credit score' like in the US, which would be used by financial institutions when they judge whether or not they can loan you money? If so, how is this score calculated, how does it aggregate all your financial information without a specific identifier, and how do you secure yourself from identity fraud/theft without having a 'secret' number to id yourself?


>If you don't mind me asking(...)how is this score calculated, how does it aggregate all your financial information without a specific identifier

We do have an specific identifier. Each person has an ID card, with an ID number. The ID number is not secret at all and used for many things everywhere. By the way, we don't have anything like a "social security card". Even kids have this ID card, their parents can (and ought to) request one for each kid.

This ID number has nothing in common with your birthday or anything. It is mostly a sequential number.

All aggregations are done using this (unique) ID number. So financial companies submit payment data associated to your ID number. So later credit scores can be computed as well.

The difference with this ID number versus the SSN is that our ID number is not used as a password of any sort.

How do companies or government institutions check out if you are who you say you are? They can take a look at your ID card. And usually they do have fingerprint scanners and signature scanners to check against the government's central ID registry.

By the way, last year we issued the Electronic Id Card, this one has a security certificate (public-private key cryptography) associated with it, and each person chooses (and keeps secret) a password. This password never needs to be revealed to anyone. With this password one can do digital signatures of any document, etc.


> By the way, we don't have anything like a "social security card". Even kids have this ID card, their parents can (and ought to) request one for each kid.

Nowadays SSNs are generally issued at birth, particularly since the IRS wants one for each dependent listed on the tax return. I believe this has been the case for at least twenty or thirty years; certainly my card dates from when I was born.

> This ID number has nothing in common with your birthday or anything. It is mostly a sequential number.

If it's a sequential number requested near birth that would mean that most people with the same birthday have similar numbers, doesn't it?


> If it's a sequential number requested near birth that would mean that most people with the same birthday have similar numbers, doesn't it?

In practice it is not requested near birth. It is sequential to the time you asked for an ID card, so people who asked for one in the same timeframe get a close number


It probably varies by country, but here you have a unique personal ID-number. First number denotes your sex, next six numbers contain your birtday, and the next four numbers are assigned (probably? not certain) in order of births during that day. Last number acts as checksum, allowing immediate check for typos.

That ID number is public and allows government & any companies/organisations you show it to immediately verify that they are dealing with a specific person, instead of having to spend time figuring out which specific person named "John Smith" they are dealing with. Having this number simply makes life more quicker and convinient. It also allows to remove any pointless duplications for cards.

For some examples: separate medical insurance card was discontinued, you can verify medical coverage by a simple number query. Same with drivers licences, they still exist in a separate physical forms for foreign trips, but but not inside the country. There is no separate libary cards, I don´t have to carry a separate card for my gym or various retailers.

I can verify myself online quickly and securely. I can digitally sign documents and contracts and email them. Honestly, I´m having hard time imagining my life without it. I´m aware that all proposals for national identification methods in the US have failed thanks to fears of "mark of the beast" and big brother, but it seems pretty silly to me. All that data already exists and can be cross referenced. Making average person waste more time and money by having such massive inefficiencies in the system seems rather silly in these times.


This ID seems just as insecure as a SSN.


"This ID seems just as insecure as a SSN"

There is a big difference: that ID is being used as a username whereas our SSNs are (usually) used as passwords.


Oh, that makes sense. What do you guys use for passwords?


SHA and PIN.

For online verification(banking, contracts, taxes, voting etc) you need both physical card and PIN at the same time.

Otherwise it works just as any other normal ID.


A personal primary key that's semipublic, and when you do a financial transaction the institution performs know-your-customer identification checks - checking photo ID (with key printed), that sort of thing.

Some even have federated systems where you can later ask the financial institution to hand out a 2FA crypto token that you can use to identify yourself to other institutions over the Internet without ever showing up in person.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: