Re: Self-Service Password Reset Practices

[John Kristoff <jtk () NORTHWESTERN EDU>]

On Mon, 25 Jul 2005 15:23:38 -0400
"clementz.7" <clementz.7 () OSU EDU> wrote:

> Instead of the whole ssn number we just use the last four.

That is only a slight improvement.  Since SSNs are assigned based on
the state of issuance and the first 3 digits refer to that state (with
some states having only a single 3 digit value) the last 4 digits may
still be useful to an identity thief.

John