Weakness in Social Security Numbers Is Found

Darren J Moffat Darren.Moffat at Sun.COM
Thu Jul 9 11:56:23 EDT 2009


dan at geer.org wrote:
> I don't honestly think that this is new, but even
> if it is, a 9-digit random number has a 44% chance
> of being a valid SSN (442 million issued to date).

I wonder if the UK NI numbers suffer from a similar problem.

The look a little like this:  AB 12 34 56 C

Information on how they are strutured is here:

http://en.wikipedia.org/wiki/National_Insurance#National_Insurance_number

However given we don't use the NI number in the UK like the SSN is 
abused in the US there isn't the same security risk in guessing them. 
Although the Wikipedia article claims they are sometimes used for 
identification I know I have never been asked for mine other than by an 
employer or suitably authorised government body how has a real need to know.

-- 
Darren J Moffat

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com



More information about the cryptography mailing list