@briankrebs__dup_6@infosec.exchange
2024-05-02 18:50 UTC
Replies (26)
-
@briankrebs@infosec.exchange 2024-05-02 19:06
To be clear, I have nothing against private companies or citizens using whatever TLD they want. But we need to stop doing this on important .gov stuff. And I would consider the IRS to easily qualify there.
-
@eb@social.coop 2024-05-02 18:53
@briankrebs@infosec.exchange The US is in a position of power where I don't think a country would consider hijacking domains it uses. Not to defend this, but
-
@charonpdx@defcon.social 2024-05-02 18:55
@briankrebs@infosec.exchange While the ccTLDs that make for fun expansions are fun; USGOV entities should never be using them. They should always use .gov exclusively. (or .mil as appropriate.)
-
@analogist@social.ridetrans.it 2024-05-02 18:56
@briankrebs@infosec.exchange isn’t login.gov supposed to perform this exact task of providing SSO for government services?? Why are they contracting auth when they have in-house capabilities? Which congresscritters are enriching their tech friends? Edit: found this article from 2 years ago - nothing seem to have changed since then https://www.theverge.com/2022/2/22/22946108/irs-login-gov-id-me-tax-season-facial-recognition
-
@rickhunter@infosec.exchange 2024-05-02 18:57
@briankrebs@infosec.exchange Are Colombian cookies actually baked treats, or slang for something else entirely?
-
@jstayco@infosec.exchange 2024-05-02 19:02
@briankrebs@infosec.exchange They are also used as an option to verify your identity for VA benefits. So they also have a solid idea of who was in the military or worked for the government at a fine scale.
-
@sehugg@infosec.exchange 2024-05-02 19:04
@briankrebs@infosec.exchange formerly known as “TroopSwap”
-
@cjust@infosec.exchange 2024-05-02 19:09
@briankrebs@infosec.exchange IT support from Italy.
-
@AG100pct@infosec.exchange 2024-05-02 19:11
@briankrebs@infosec.exchange
-
@winfriedtilanus@mastodon.nl 2024-05-02 19:14
@briankrebs@infosec.exchange welcome to the world of every non-US resident.
-
@dragonfrog@mastodon.sdf.org 2024-05-02 19:15
@briankrebs@infosec.exchange Dangit now I'm reading about Colombian desserts.
-
@mcfly@milliways.social 2024-05-02 19:19
@briankrebs@infosec.exchange Did they have a proper cookie warning? Italy is a GDPR country so if the cookie really comes from something italy there should be a GDPR warning.
-
@markkrueg@social.treehouse.systems 2024-05-02 19:22
@briankrebs@infosec.exchange wow. smh
-
@samhainnight@mstdn.social 2024-05-02 19:24
@briankrebs@infosec.exchange I spent more than an hour trying to get in touch with customer service with ID.me recently. I needed a replacement card but couldn’t order one on the automated system without my card number. Sorry not sorry, but if my taxes are paying for a government system, then I deserve being able to talk to my government about it. Something about taxation and representation.
-
@TopKnot@mas.to 2024-05-02 19:53
@briankrebs@infosec.exchange I'm sure you've done your due diligence, but I'd find a different way to log into the IRS. They can't even answer a phone or even discuss the problem on their Facebook timeline. When I had problems, they acted like a company with 3 employees and only one employee worked in a part time position. That employee was excellent at telling me they'd look into the problem and call me back. ID.me never called me back.
-
@LanguageMan1@social.vivaldi.net 2024-05-02 19:57
@briankrebs@infosec.exchange I can only imagine it getting worse before it gets better
-
@mikeloukides@hachyderm.io 2024-05-02 20:14
@briankrebs@infosec.exchange Do the cookies from Columbia come with coffee?
-
@longobord@infosec.exchange 2024-05-02 20:29
@briankrebs@infosec.exchange What's worse is that this is for a US government website. You would think they would have access to their own domain names or something.
-
@grumble209@techhub.social 2024-05-02 21:52
@briankrebs@infosec.exchange I hear the Internet is global.
-
@LukefromDC@kolektiva.social 2024-05-02 21:58
@briankrebs@infosec.exchange Counter is NOT to use the IRS website at all, use paper returns only no matter what. Clunky but it's not worth letting scum like this get your personal information. Short of that, use live linux USB stick or better yet, a dedicated phone or laptop that does nothing else. Lots of old phones get trashed, one can be factory reset and used as a quarantine box, tethering to your normal connection. It's not the IP address you are hiding. If a face picture is demanded, do not use the offending site no matter what-even if it means having to travel to an office for in-person interaction My computers and phones are fugitives from all of the tracking and ad networks.
-
@Theodrake@ioc.exchange 2024-05-02 23:01
@briankrebs@infosec.exchange I believe this all goes back to Reaganomics and small government. I refused to sign up when Infragard decided to use it. Kept getting emails imploring me to not lose access. Saying look 1,000s of other members have already signed up. Great I'm just waiting for id.me zero day issue.
-
@christmastree@mastodon.social 2024-05-02 23:22
@briankrebs@infosec.exchange whatever happened to https://login.gov?
-
@passim@zirk.us 2024-05-03 01:50
@briankrebs@infosec.exchange @dangoodin@infosec.exchange ID.me is a boondoggle. Login.gov has issues, but I think it’s better for the government to run its own critical identity proofing and authentication infrastructure.
-
@xk3@mastodon.social 2024-05-03 09:32
@briankrebs@infosec.exchange those aren't links... they're _salsiccia_
-
@bogdrakonov@infosec.exchange 2024-05-03 16:26
@briankrebs@infosec.exchange I have this stuff blocked at the DNS level so imagine my surprise that ID[dot]me wasn’t down for days but it just relied on domains that I consider suspect and block.
-
@hugooo@mstdn.social 2024-05-04 23:11
@briankrebs@infosec.exchange What happens when you put Pablo Escobar in charge of the Girl Scouts: Cookies from Colombia.