Sign Up at irs.gov Before Crooks Do It For You

Discussion in 'privacy problems' started by ronjor, Mar 30, 2015.

  1. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
    http://qz.com/445233/inside-the-irss-massive-data-breach/
     
  2. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,430
    Location:
    Surrey, England.
    By Steve Ragan,
    Call recording on: Listen as an IRS scammer threatens us with arrest if money isn't paid | CSO Online
     
  3. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
  4. Rilla927

    Rilla927 Registered Member

    Joined:
    May 12, 2005
    Posts:
    1,742
    Before I got to the bottom of the page I'm thinking this is a scam itself and then low and behold I get to the bottom of the page and read Dermot7 post.

    Even if it wasn't a scam all you would have to do is type up an Affidavit that it wasn't you and then submit it into the Public Record of the Recorders office where you live and nothing in court will stand up against you.

    If you had to appear in court you show the judge the Affidavit.

    An unrebutted Affidavit becomes truth in commerce.
     
    Last edited: Oct 14, 2015
  5. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
    http://krebsonsecurity.com/2015/12/dont-be-a-victim-of-tax-refund-fraud-in-16/
     
  6. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
  7. Palancar

    Palancar Registered Member

    Joined:
    Oct 26, 2011
    Posts:
    2,402
    This hit home on my end. When my Son went to file, his daughters number (minor) was already used and now its going to take paperwork and lots of time to get his own money. This really is beyond believable. If the IRS can't be secure, then who can??
     
  8. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
    There is really no excuse for this. None.
     
  9. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
     
  10. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
     
  11. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
     
  12. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
    More from Brian Krebs.
     
  13. Palancar

    Palancar Registered Member

    Joined:
    Oct 26, 2011
    Posts:
    2,402
    You just have to love this stuff. Check this out, the Gov is beyond stupid! So I efile my 2015 taxes and all goes through, money comes back pretty quickly. Done for 2015 taxes. After reading this thread and posting above about my son's issues, I decide to get an IRS - IP PIN so my tax stuff is secure for the future. Sounds like a plan right? Nope according to the IRS. They issue those to folks that have already been hacked, and not folks that have been lucky to this point. Kidding right? Nope, you can get the protection only after you spend all the time and energy cleaning up after a tax hack on your records. Amazingly stupid!

    I am really hoping that the IRS agent I spoke with is wrong, but I don't want to spend another 45 minutes on the phone waiting for another one. The 45 minutes is another issue, but that is another thread too.
     
  14. Palancar

    Palancar Registered Member

    Joined:
    Oct 26, 2011
    Posts:
    2,402
    So now I find out I was not told the whole truth. It is possible to fill out form 14039 and simply state you feel like your bank, credit card company, etc... may have been hacked and the IRS will give you an IP PIN once they get your 14039 in their hands. They never deny the IP PIN if you state a fear of being hacked on the 14039. Technically I wasn't lied to but the agent had to know this "ploy" is available to all residents. The Gov can really frustrate me. I thought they were working for us.
     
  15. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
  16. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
    http://krebsonsecurity.com/2016/03/thieves-nab-irs-pins-to-hijack-tax-refunds/
     
  17. Palancar

    Palancar Registered Member

    Joined:
    Oct 26, 2011
    Posts:
    2,402
    Was the security designer on this project an 8 yr old doing a school project? This call in (website access) feature to re-discover your lost/forgotten IP PIN completely negates the concept in its entirety. Two no brainer options/suggestions:

    1. physical attendance at an IRS office if you forget or lose your IP PIN (remember this is YOUR fault not the IRS's). Prerequisite to protect us all and there are NO exceptions!

    2. 2FA (two factor authentication) where a six digit text code is sent to the designated phone number on the IRS IP PIN record file. One time use code and you have ten minutes to confirm it on the IRS website or its useless!! Remember that if you are not going to require physical attendance the individual is already on the website providing their "supposed" credentials to secure the PIN. The site fires out the code via text and the taxpayer enters the code on the site. NO code means NO PIN provided, NO exceptions. After 3 failed attempts the PIN providing feature is locked to physical attendance only. What could possibly be wrong with this idea? The legit user wouldn't be inconvenienced at all. If my PIN feature gets locked by a "dirt bag" I could care less because I already have my PIN. I simply file and provide the PIN and I am good!
     
    Last edited: Mar 1, 2016
  18. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
    http://krebsonsecurity.com/2016/03/irs-suspends-insecure-get-ip-pin-feature/
     
  19. Palancar

    Palancar Registered Member

    Joined:
    Oct 26, 2011
    Posts:
    2,402
    Think they read my post above yours? ----------------------------------------- > joking!
     
  20. oliverjia

    oliverjia Registered Member

    Joined:
    Jul 21, 2005
    Posts:
    1,926
    Many people work for these agencies such as IRS are truly beyond stupid. You could not believe how such a school of stupid ****** still have your most important personal info on their website. Whoever in charge of the IRS.GOV security should have been fired. ******.
     
  21. deBoetie

    deBoetie Registered Member

    Joined:
    Aug 7, 2013
    Posts:
    1,832
    Location:
    UK
    I don't believe the stupidity argument I'm afraid.

    The bottom line is that at the "corporate" and senior management levels, they have no significant skin in the game. They won't go to jail over it, and their bonuses/empire would suffer if they took care over other peoples' data.

    The foot-troops will vary, some of them are highly intelligent and skilled. And they will have learned that management is not the slightest interested in doing it properly, and will not fund doing even moderately responsible things.

    If anything, this situation has got worse since the laws giving relief from liability if corporates participate in information sharing was passed, and government has blanket immunity.
     
  22. Palancar

    Palancar Registered Member

    Joined:
    Oct 26, 2011
    Posts:
    2,402

    I really wish the things you said were false.

    I just signed up for the IP PIN under the assumption that it will be locked to a reset via the web. I have never been hit yet, but my Son has. I figure this can't hurt, but my fingers are crossed. I already have my 2015 refund deposited so I made it through last year OK in this regard.
     
  23. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
     
  24. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
  25. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,072
    Location:
    Texas
    http://krebsonsecurity.com/2016/04/...yroll-firm-greenshades-ditches-ssndob-logins/
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.