[Info-vax] BridgeWorks

[Arne Vajhøj]

On 7/24/2024 8:46 AM, Simon Clubley wrote:
> On 2024-07-23, Arne Vajhøj <arne at vajhoej.dk> wrote:
>> And some data are still sensitive after N years.
>>
>> Name, SSN and DOB does not change.
> 
> The only reason why SSN is important is because someone does not know
> the difference between identification versus authentication.
> 
>> Email address, phone number, bank account, passwords
>> may change or they may not change over N years.
> 
> This is why 2FA exists, so that an attacker needs access to something
> you control.

Gathering personal information is first step in identity theft.

And email address and phone number can be utilized
by attackers in case of MFA.

Arne