DahGangalang
@DahGangalang@infosec.pub
- Comment on Anon critiques humanity 1 day ago:
I think thats a thesis that hasn’t been properly peer reviewed (though it does have some clinical evidence), which is to say its not widely accepted as a reason for it to exist (but that that may be changing).
- Comment on frenly warnin 1 week ago:
Pretty sure i get the rest of it, but not sure I get the dog whistle behind 13 January. What’s the deal with that?
- Comment on How does this pic show that Elon Musk doesnt know SQL? 5 weeks ago:
Thanks for genuine response. Lol, most who interpret my question that way you did don’t seem interested in a good faith discussion. But ol’ boy is def tripping if he thinks SQL isn’t used in the government.
Big thing I’m intending to pry at is whether there would be a legitimate purpose to have duplicated SSNs in the database (thus showing the First Bro doesn’t understand how SQL works).
- Comment on How does this pic show that Elon Musk doesnt know SQL? 5 weeks ago:
Yeah, obviously ol’ boy is tripping if he thinks SQL isn’t used in the government.
Big thing I’m prying at is whether there would be a legitimate purpose to have duplicated SSNs in the database (thus showing the First Bro doesn’t understand how SQL works).
- Comment on How does this pic show that Elon Musk doesnt know SQL? 5 weeks ago:
Yeah, obviously ol’ boy is tripping if he thinks SQL isn’t used in the government.
Big thing I’m prying at is whether there would be a legitimate purpose to have duplicated SSNs in the database (thus showing the First Bro doesn’t understand how SQL works).
- Comment on How does this pic show that Elon Musk doesnt know SQL? 5 weeks ago:
had to join to it
I don’t think I get what this means. As you describe it, that reference id sounds comparable to a pointer, and so there should be a quick look up when you need to de-reference it, but that hardly seems like a “dependency knot”?
I feel like this is showing my own ignorance on the back end if databasing. Can you point me to references that explain this better?
- Comment on How does this pic show that Elon Musk doesnt know SQL? 5 weeks ago:
Yeah, obviously ol’ boy is tripping if he thinks SQL isn’t used in the government.
Big thing I’m prying at is whether there would be a legitimate purpose to have duplicated SSNs in the database (thus showing the First Bro doesn’t understand how SQL works).
- Comment on How does this pic show that Elon Musk doesnt know SQL? 5 weeks ago:
Yeah, obviously ol’ boy is tripping if he thinks SQL isn’t used in the government.
Big thing I’m prying at is whether there would be a legitimate purpose to have duplicated SSNs in the database (thus showing the First Bro doesn’t understand how SQL works).
- Comment on How does this pic show that Elon Musk doesnt know SQL? 5 weeks ago:
Yeah, obviously ol’ boy is tripping if he thinks SQL isn’t used in the government.
Big thing I’m prying at is whether there would be a legitimate purpose to have duplicated SSNs in the database (thus showing the First Bro doesn’t understand how SQL works).
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
Right. Fingers crossed we figure out national IDs before then.
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
In responding to other comments, I’ve found similar things.
All the same, thanks for the resources!
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
Was trying to find something from the SSA itself on the topic, but didn’t turn anything useful up on the quick.
Here is a link for the lazy on the topic: https://www.nbcnews.com/technolog/odds-someone-else-has-your-ssn-one-7-6C10406347
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
Said this elsewhere, but wanted to be sure you had the chance to see the linked material. The Social Security FAQ page (Q 20, specifically) says that they do not do re-use of old SSNs when people die.
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
I don’t want to come off as a bot spamming this in a bunch of different comment threads, but The Social Security FAQ page (Q 20, specifically) says that they do not do re-use of old SSNs when people die.
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
The Social Security FAQ page says that they do not do this.
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
Naw, I definitely meant to be asking about duplication of data in databases (vs if the government actually uses SQL).
Sorry to have communicated that so poorly. Everyone seems to be taking the angle you’re arguing though. Guess I’ll need to work on that.
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
Ugh, YES, I am so frustrated at the counter arguments for this that I constantly hear spouted by my (ultra-conservative) family.
I hope that notion re-enters the public consciousness as a part of this (not holding my breath tho)
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
Hmmm, well I can’t speak to how the actual databases are put together, so maybe they would have that as two separate unique primary keys with a duplicated SSN.
But it really seems like bad design if they out it together that way…
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
Yeah, obviously ol’ boy is tripping if he thinks SQL isn’t used in the government.
Big thing I’m prying at is whether there would be a legitimate purpose to have duplicated SSNs in the database (thus showing the First Bro doesn’t understand how SQL works).
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
Yeah, obviously ol’ boy is tripping if he thinks SQL isn’t used in the government.
Big thing I’m prying at is whether there would be a legitimate purpose to have duplicated SSNs in the database (thus showing the Vice Bro doesn’t understand how SQL works).
I’m not aware of any instance where two people share an SSN though. The Social Security Administration even goes as far as to say they don’t recycle the SSNs of dead people (its linked a couple times in other comments and Voyager doesn’t let me save drafts of comments, I’ll make an edit to this comment with that link for you).
Can you point me to somewhere showing multiple people can share an SSN?
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
Yeah, I can imagine thats be an administrative headache. I do not envy them the opportunity of sorting that out.
Thanks for the example though. That makes sense.
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
I’m not familiar with cases where someone’s SSN could change. Could you link to resources on when that would happen?
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
I think I was getting some wires crossed and/or misunderstood what geoff (parent commentor to my last comment) was saying, so my comment may be misdirected some.
But according to The Social Security FAQ page, SSNs are not recycled, so that data (especially when compounded and hashed with other data) should be able to establish a one-to-one relationship between each primary key and an SSN, thusly having SSNs appear associated with multiple primary keys is a concern.
Other comments have pointed to other explanations for why SSNs could appear to occur multiple times, but those amount to “it appeared in a different field associated with the same primary key”. I think thats the most likely explanation of things.
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
Yeah, no one appreciates security.
I probably overused that saying to explain it: ‘if theres no break ins, why do we pay for security? Oh, there was a break in - what do we even pay security for?’
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
Yeah, databases are complicated and make my head hurt. Glancing through resources from other comments, I’m realizing I know next to nothing about database optimization. Like, my gut reaction to your comment is that it seems like unnecessary overhead to have that data across two tables - but if one sub-dept didn’t need access to the raw SSN, but did need access to less personal data, j could see those stored in separate tables.
But anyway, you’re helping clear things up for me. I really appreciate the pseudo code level example.
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
Thats how I feel too.
Lol, I’d love to see the data hes trying to speak about (not that that’d be any kind of concerning for privacy /s). I don’t think he’s outright lying, but it definitely feels like a misrepresentation / wrong conclusion from the data.
But thanks for your part in helping me understand all this!
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
From what I’m seeing in other comments, it seems SSNs aren’t used as primary keys, but they are part of generating the primary key. I haven’t seen anyone directly say it, but it sounds like the primary key is a hash of SSN + DOB (I hope with more data to add entropy, because thats still a tiny bit of data to build a rainbow table from).
Still, assuming we haven’t begun re-using SSNs, it seems concerning to me that a SSN is appearing multiple times in the database. It seems a safe assumption that the uniqueness of a SSN should make the resultant hash unique, so a SSN appearing as associated to multiple primary keys should be a concern, right?
Other comments have led me to believe the “duplicate SSNs” are probably appearing in “different fields” (e.g. a dead man’s SSN would appear directly associated to him, but also as a sort of “collecting payments from” entry in his living wife’s entry). That would a misrepresentation of the facts (which we know Vice Bro, Elon Musk the Wise and Honest would never do). Occam’s Razor though has me leaning in that direction.
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
Ah the old “malware detectors have the selectors for malware and so they show up as malware to other malware detection systems” problem.
Yeah, that seems like a reasonable case to have duplicate SSNs.
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
Thats interesting. I didn’t know anything about normal forms, but a quick glance at G4G has some interesting information. I don’t have the time to go through their full article at the moment, but its been added to my to do list.
Link for the lazy: geeksforgeeks.org/types-of-normal-forms-in-dbms/
- Comment on How does this pic show that Elon Musk doesnt know SQL? 1 month ago:
This sounds like a reasonable argument.
Can you pass any resources with examples on when having duplicate values would be useful/best practices?