Comments on: “Identity fraud” again http://www.lightbluetouchpaper.org/2006/08/08/identity-fraud-again/ Security Research, Computer Laboratory, University of Cambridge Tue, 07 Oct 2008 02:42:06 +0000 http://wordpress.org/?v=2.6.2 By: louise http://www.lightbluetouchpaper.org/2006/08/08/identity-fraud-again/#comment-22389 louise Wed, 20 Jun 2007 09:42:13 +0000 http://www.lightbluetouchpaper.org/2006/08/08/identity-fraud-again/#comment-22389 i left england to live in france january 4th 2002 i have just recieved a letters 5 years on saying i have a dorothy perkins account which was opened after i left the country . the debt collectors are insisting i opened the account and want full payment immediatley.when i contacyted the agency they totally refused to believe me so where do i go now. this is really worrying what else is out there in my name. i left england to live in france january 4th 2002 i have just recieved a letters 5 years on saying i have a dorothy perkins account which was opened after i left the country . the debt collectors are insisting i opened the account and want full payment immediatley.when i contacyted the agency they totally refused to believe me so where do i go now. this is really worrying what else is out there in my name.

]]> By: Philip Malan http://www.lightbluetouchpaper.org/2006/08/08/identity-fraud-again/#comment-7982 Philip Malan Wed, 06 Dec 2006 14:17:56 +0000 http://www.lightbluetouchpaper.org/2006/08/08/identity-fraud-again/#comment-7982 Everywhere you look these days people are warning you about identitiy theft, online fraud etc. Check your credit report, subscribe to our service and we will notify you when you have a problem. All of these are reactive. The damage has been done. How about a proactive approach? How about giving control back to the user to manage their data. iamdentity is a UK based company specialising in online identity management and data security. With their service users can have a single online identity that can be used across the Internet. It's not only safe and convenient but also practical. If you move, you only need to update your details in one place. Whenever you log into an iamdentity enabled website, your details are automatically updated. You can even control the distribution of your data. That makes more sense than sitting around and waiting for you to become a victim. Have a look at http://www.iamdentity.com and decide for yourself. Everywhere you look these days people are warning you about identitiy theft, online fraud etc. Check your credit report, subscribe to our service and we will notify you when you have a problem. All of these are reactive. The damage has been done.

How about a proactive approach? How about giving control back to the user to manage their data. iamdentity is a UK based company specialising in online identity management and data security. With their service users can have a single online identity that can be used across the Internet.

It’s not only safe and convenient but also practical. If you move, you only need to update your details in one place. Whenever you log into an iamdentity enabled website, your details are automatically updated. You can even control the distribution of your data.

That makes more sense than sitting around and waiting for you to become a victim.

Have a look at http://www.iamdentity.com and decide for yourself.

]]> By: Matt Palmer http://www.lightbluetouchpaper.org/2006/08/08/identity-fraud-again/#comment-1142 Matt Palmer Fri, 18 Aug 2006 09:26:48 +0000 http://www.lightbluetouchpaper.org/2006/08/08/identity-fraud-again/#comment-1142 @giafly It's not an equivalent example though. In your example, the website loses nothing if your reputation is hurt by an impersonator, and it is the impersonator who directly and intentionally (I assume) damages your reputation. The impersonator is actually attacking you, not the website. In the bank example, the bank loses money to the impersonator. The impersonator doesn't really attack you at all - they just use your identity to get at the Bank's resources. You lose a good credit score if the banks and credit agencies don't correct the problem, making you the victim of the Bank. @giafly

It’s not an equivalent example though. In your example, the website loses nothing if your reputation is hurt by an impersonator, and it is the impersonator who directly and intentionally (I assume) damages your reputation. The impersonator is actually attacking you, not the website.

In the bank example, the bank loses money to the impersonator. The impersonator doesn’t really attack you at all - they just use your identity to get at the Bank’s resources. You lose a good credit score if the banks and credit agencies don’t correct the problem, making you the victim of the Bank.

]]> By: giafly http://www.lightbluetouchpaper.org/2006/08/08/identity-fraud-again/#comment-984 giafly Fri, 11 Aug 2006 09:52:33 +0000 http://www.lightbluetouchpaper.org/2006/08/08/identity-fraud-again/#comment-984 I'm not so sure. Here IMHO is an equivalent example. Suppose someone logs on to Websites, impersonating me, and posts idiotic and outrageous opinions in my name. Setting aside the question of how one could tell - as in the bank case, my reputation is damaged, taking time and expense to correct. I don't see how the Websites are the victims, except minimally because they are put to some slight expense in investigating and reversing the damage. And I don't think they are the ones victimising me, providing they broadcast the falsehoods in good faith. To be even more specific, if I impersonated the previous poster in this way, would this Website be the victim, not him? I’m not so sure. Here IMHO is an equivalent example.

Suppose someone logs on to Websites, impersonating me, and posts idiotic and outrageous opinions in my name. Setting aside the question of how one could tell - as in the bank case, my reputation is damaged, taking time and expense to correct.

I don’t see how the Websites are the victims, except minimally because they are put to some slight expense in investigating and reversing the damage. And I don’t think they are the ones victimising me, providing they broadcast the falsehoods in good faith.

To be even more specific, if I impersonated the previous poster in this way, would this Website be the victim, not him?

]]> By: Nicholas Bohm http://www.lightbluetouchpaper.org/2006/08/08/identity-fraud-again/#comment-962 Nicholas Bohm Wed, 09 Aug 2006 11:25:28 +0000 http://www.lightbluetouchpaper.org/2006/08/08/identity-fraud-again/#comment-962 The main victim of an impersonation attack is, as Ross says, the person on whom the impersonation is practised and who acts on the false belief that it induces. The person who is impersonated may become a victim too - it must undoubtedly be a very great nuisance to have to "repair" a damaged credit status, for example. But it is important to appreciate who has victimised the consumer: it is the bank or credit reference agency that spreads the impersonator's falsehood that makes a victim of the consumer. The banks need good protection against impersonators; their customers need better protection against the banks and the credit reference agencies. The main victim of an impersonation attack is, as Ross says, the person on whom the impersonation is practised and who acts on the false belief that it induces.

The person who is impersonated may become a victim too - it must undoubtedly be a very great nuisance to have to “repair” a damaged credit status, for example. But it is important to appreciate who has victimised the consumer: it is the bank or credit reference agency that spreads the impersonator’s falsehood that makes a victim of the consumer.

The banks need good protection against impersonators; their customers need better protection against the banks and the credit reference agencies.

]]>