Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 48 guests and 1 member online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Social Engineeringarrow Predicting Social Security Numbers from Public Data
EH-Net
May 19, 2013, 12:58:10 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Predicting Social Security Numbers from Public Data  (Read 8692 times)
0 Members and 1 Guest are viewing this topic.
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 4165


Editor-In-Chief


View Profile WWW
« on: July 07, 2009, 05:02:14 PM »

Not sure where this should go, so why not in SE. Here is an academic paper on the topic by researches from Carnegie Mellon University that was just released on the Proceedings of the National Academy of Sciences web site and a couple links to articles reporting on it.

Predicting Social Security Numbers from Public Data

Report: Social Security numbers can be predicted
CNET - http://news.cnet.com/8301-1009_3-10280614-83.html
CNN - http://www.cnn.com/2009/TECH/07/07/social.security.numbers/index.html

Let the discussion begin...

Don
Logged

CISSP, MCSE, CSTA, Security+ SME
timmedin
Sr. Member
****
Offline Offline

Posts: 469



View Profile WWW
« Reply #1 on: July 11, 2009, 04:35:09 PM »

I always wondered about this since I knew that the first 5 were easy to guess, just didn't know how easy the last 4 are.

"The Social Security number's first three digits -- called the "area number" -- is issued according to the Zip code of the mailing address provided in the application form. The fourth and fifth digits -- known as the "group number" -- transition slowly, and often remain constant over several years for a given region. The last four digits are assigned sequentially"
Logged

twitter.com/timmedin | http://blog.securitywhole.com
former33t
Full Member
***
Offline Offline

Posts: 226


View Profile
« Reply #2 on: July 11, 2009, 09:49:32 PM »

I have two brothers (two years apart, so this spans four years) and we all have the same first five numbers.

I was in the service some years ago and I remember personnel specialists being able to tell you your place of birth based on your SSN.  It was a big joke.  Some of them claimed to by psychic.  You'd put your home of record as being say Utah and they'd say, "but you were born around San Francisco, right?"  Everybody would chuckle and life would go on.

My wife does medical work and turned me on to the Social Security Death Index.  This is a database where you can find out if a particular social belongs to a dead person.  I started thinking years ago that with that data (to help bracket in the last four numbers based on birthdate) and the first five that were already easily guessable that you'd be on a legit number in no time.  Bad news is that the SSDI is freely available via many genealogy sites.
Logged

Certifications: CREA, MCSE: Security, CCNA, Security+, other junk
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.625 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.