[LUNI] 1 Phish - 2 Phish

[Michael Scott]

Quoting Mark Matula <mmatula at ratula.net>:

> person who might actually HAVE the SSN you randomly feed in.  Just one
> headached for Mr. 287-32-4525 caused by your script would, I feel,
> totally negate any headaches you may or may not have caused for Mr. Spammer. 
> I'd be really careful with such countermeasures.

I would imagine that the odds are better than fair that somebody DOES have that
SSN, but what are the odds his name matches the SSN?  I think you need at least
two matching pieces of info (ie SSN + Date of birth) otherwise, people could
just generate numbers at random and get hits without the phishing expedition.

----------------------
- Mike Scott
- mscott at pyewacket.org