What methods should be used to determine an individuals ability to pay?
Income, assets, and liabilities.
Your credit score doesn't take into account the first two. ....
What methods should be used to determine an individuals ability to pay?
Perhaps, certainly possible. However, even the most basic of intrusion detection and exfiltration detection systems would have 'noticed' 143 million records going out the door, and shut said door.Doesn't matter how good the encryption or security is from external threats as it all has to be unencrypted to be usable at some point. Probably wasn't a "hack" but a disgruntled IT flunky with physical access, root password, and a thumb drive.
I have no first hand knowledge, I'm only making educated guesses based on Equifax' reports of the extent of the breech. I'm basing my perceptions on Equifax' own disclosure, as it would indicate any real-world protections against usability of the data were either completely inadequate or non-existent. The bloggers don't know any more than I do of course, but when a company comes out and states the hackers got everything? The hackers got everything.Just out of curiosity, where did you read that the data was unencrypted and in plain text? I follow a lot of security bloggers, and nobody has reported that as far as I'm aware. I'd enjoy reading the article to see what other information they have. From my understanding, Equifax has been fairly tightlipped about the whole incident.
The one thing most agree on is this has turned into a public relations sh!t storm for them.
And while it may have been an internal job, it may have been a simple exploit that allowed system level access behind a 0-day exploit. An administrative backdoor was set up and the private keys were located. I can't speak for y'all, but every time I leave a security conference, I regret choosing an occupation in IT.
Income, assets, and liabilities.
Your credit score doesn't take into account the first two. ....
blockchainNot quite sure how to break this system of centralized data collection/storage.
I see this as more of a regulatory problem than a technical one. I'm just as guilty as most Americans at this point, but the real issue is all the personal debt to begin with. If interest rates weren't lower than inflation then we wouldn't be in this situation where your credit score is so important in the first place.Without the services of credit reporting agencies the accessibility to credit would stop or at least be limited to merchants willing/able to take the risk. Either that or a huge return on lay away programs. Both would cripple our consumer based economy. Either that or HUGE pricing adjustments would need to happen, which would kill the stock market. Neither is a good idea. Aside from a sealed report model where everyone's credit is sealed and nobody has any access without some form of authentication I'm not sure why to truly do.
Income, assets, and liabilities.
Your credit score doesn't take into account the first two. ....
I always thought that income was required when applying for a loan.
Should one be required to inform what their assets are before applying for a loan?
Ah, gotcha.I said your credit score. Morgages will want your income, but most car loans, credit cards, store credit, payday, will only check your credit score (if they even do that).
What kind of cars?I have a 820 Fico and for at least the last 3 cars all wanted a pay stub or direct deposit info.
What kind of cars?
I haven't had to prove income to finance the last few cars I bought. They just went off credit score.
That seems odd to me.
I have always gotten some kind of pay "stub" everywhere I worked while having direct deposit.
This is a pretty good read on the situation...
https://www.reddit.com/r/YouShouldK..._what_your_options_for_responding_to_equifax/