安全与隐私kalzumeus.com编辑精选
身份盗用、信用报告与你
Identity Theft, Credit Reports, and You
2017 — 2019，它一次次回到首页
黑点是上首页（≥ 50 分）的那次投稿，空心点是没冲上去的投稿，点越大分数越高。
导读
这篇文章讲身份被盗后如何处理信用报告与债务纠纷：保留书面记录，冷静而有条理地与银行、催收机构和信用局交涉，并在必要时向监管机构投诉。文中也提到预防措施，例如冻结三大信用局的信用数据。
为什么经久不衰：它把面对信用体系和官僚机构时最有效的做法——留证据、写清楚、按规则升级——讲得具体可操作，多年后仍是身份盗窃与消费者维权的实用指南。
HN 评论精选
冷静加书面证据比发怒更能对付官僚机构。
非常好的建议。冷静但有条理地收集书面记录，再把这些记录反馈给他们，这对任何失控的官僚机构都是极好的策略。这类机构整天都能应付愤怒暴躁的人，但一个冷静、掌握大量有记录的失误甚至潜在违法证据的人，是官僚机构最可怕的噩梦。
code4tee查看英文原文
All very good advice. The bit about calmly but methodically collecting a paper trail and then reading it back to them is excellent advice for any out of control bureaucracy. Such entities can handle angry irate people all day long, but a calm and collected person that posses ample evidence of documented screw ups and potential illegalities is a bureaucracy's worst nightmare.
未受害者也应冻结三大信用局的信用数据。
kalzumeus.com 这篇文章信息丰富且易懂，尤其如果你的身份已经被盗。如果还没被盗，NYTimes 有篇文章建议：向 Equifax、Experian、TransUnion 三大信用局申请冻结你的信用数据。注意这些服务可能需要多次尝试、一定坚持、服务费或拨打自动系统电话，效果因人而异。
mistersquid查看英文原文
The kalzumeus.com article is informative and accessible, especially if your identity has been stolen. If your identity has not yet been stolen, the NYTimes has an article titled "Equifax's Instructions Are Confusing. Here's What to Do Now." [0] tl;dr: Freeze requests for your credit data at the big 3: Equifax [1], Experian [2], and Transunion [3]. (Note: these services may require multiple attempts, some persistence, a service fee, or a phone call to an automated system. YMMV.) [0] https://www.nytimes.com/2017/09/08/your-money/identity-theft/equifaxs-instructions-are-confusing-heres-what-to-do-now.html [1] https://www.freeze.equifax.com/Freeze/jsp/SFF_PersonalIDInfo.jsp [2] https://www.experian.com/freeze/center.html [3] https://www.transunion.com/credit-freeze/place-credit-freeze EDIT: missing word
引用监管期限威胁能迫使保险公司迅速行动。
这个建议也适用于其他公司拖延你、希望你自己放弃消失的场景。我的车曾被闯停车标志的人严重撞坏，明显是对方责任。她的保险公司 Allstate 以“调查”这个显而易见的情况拖了一个多月。我的车较旧，价值大约等于维修费，他们可能以为我会放弃。但这是我唯一的交通工具，上班需要。我查了加州保险法规，发现要求理赔须在40天内解决。40天后，我写了一封类似本文示例的信，给他们五天时间，否则向加州保险部门投诉。他们行为立刻改变，令人惊讶。之前几周玩电话捉迷藏的理赔员一小时内打电话，并安排附近修理厂立即开工。他们嘲笑愤怒的咆哮，但会不惜一切安抚一个专注且能引来监管机构的人。
davidroberts查看英文原文
This advice works in other scenarios where companies string you along hoping you will give up and disappear. Once my car was badly damaged by someone who ran a stop sign. It was clearly the other driver's fault. Her insurance was Allstate. They strung me along for more than a month "investigating" this obvious situation. My car was an older one that was worth about the cost of the repairs, and they probably thought I would just give it up. But it was my only transportation and I needed it for work. I did some research on California's insurance regulations and discovered their requirement that claims be settled within 40 days. After 40 days passed, I wrote a email similar to the letter examples in this article, giving then five days before I reported them to California's insurance department. It was astonishing to see the immediate change in their behavior. The adjustor who had been playing telephone tag for weeks called me within an hour and arranged for a body shop near my home to start work immediately. They laugh at angry bluster, but will move mountains to appease a focused person who can bring a regulatory agency down on them.
向 FTC 投诉可推动电信公司解决身份欺诈问题。
这是我的身份盗窃故事，也发生在2017年（拜 OPM 所赐）。后来我没写出来，但我妻子今年早些时候也遇到了。欺诈者用她的资料开了 T-Mobile 账户，我们费了很大劲让 T-Mobile 处理。几个月后，在一封威胁把她“债务”送催收的信之后，妻子终于向 FTC 投诉，几周后事情解决。处理通信公司问题时值得记住，至少政府还能运转时。
cdubzzz查看英文原文
Here is my identify theft story, also from 2017 (thanks, OPM): https://chrxs.net/articles/2017/03/23/responding-to-identity-theft/ I never got around to writing about it, but this also happened to my wife earlier this year. The fraudster opened a T-Mobile account with her data and we had an absolute hell of a time getting T-Mobile to do anything about it. After a few months and a letter threatening to send her "debt" to collections, my wife finally filed a complaint with the FTC and the matter was resolved a few weeks later. Good thing to keep in mind for issues with communications companies, at least when the damn government is functioning... https://www.ftccomplaintassistant.gov
历次讨论
同类还值得读
非法素数
Illegal prime
维基百科条目，介绍“非法素数”：某些素数之所以被称为“非法”，是因为它们经特定编码后，恰好对应一段被法律禁止传播的数据——最著名的是 DVD 解密程序 DeCSS 的代码，有人把…
安全与隐私上首页 5 次 · 2010–2021en.wikipedia.org编辑精选关于 /dev/urandom 的常见误区
Myths about /dev/urandom
（Thomas Hühn 撰写，2014 年首发并持续更新）逐条反驳关于 /dev/urandom 的常见误解：它与 /dev/random 使用的是同一个 CSPRNG，一旦完…
安全与隐私上首页 5 次 · 2014–20202uo.de编辑精选AES 高级加密标准火柴人图解
A Stick Figure Guide to the Advanced Encryption Standard (AES)
一篇用火柴人漫画形式讲解 AES（高级加密标准）算法的经典科普文章。
安全与隐私上首页 5 次 · 2009–2022moserware.com编辑精选指纹是用户名，不是密码
Fingerprints are Usernames, not Passwords
作者（eCryptfs 维护者、Ubuntu 安全工程师）认为指纹等生物特征是公开、不可更改的标识，应视作用户名而非密码，不能当作秘密凭据用于认证。
安全与隐私上首页 4 次 · 2013–2017blog.dustinkirkland.comHTTPS 连接的最初几毫秒（2009）
The First Few Milliseconds of an HTTPS Connection (2009)
逐毫秒拆解一次 HTTPS 连接建立时发生了什么，重点讲 TLS 握手、证书验证、RSA 签名与密钥协商等机制，面向不熟悉该领域的读者。
安全与隐私上首页 4 次 · 2009–2020moserware.com编辑精选