[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-Disclosure] Drivers License number generation - was Small vulnerability in Canadian Pay Pal Secret Question
- To: Security@paypal.com, full-disclosure@lists.netsys.com
- Subject: Re: [Full-Disclosure] Drivers License number generation - was Small vulnerability in Canadian Pay Pal Secret Question
- From: "Eric J. Christeson" <echriste@702com.net>
- Date: Fri, 09 Jan 2004 14:41:54 -0600
On Fri, 2004-01-09 at 14:03, John LaCour wrote:
> American drivers license numbers are generated differently
> by state. However, at least three states use the same
> algorithm which is uses your name and birth date to generate your
> driver's license number.
>
> See http://www.highprogrammer.com/alan/numbers/dl_us_shared.html
> for details.
Until 2002 North Dakota used one's SSN for a driver's license number.
http://www.state.nd.us/lr/assembly/57-2001/session_laws/documents/MTRVH.pdf
Not that they changed everyone's number at once. They issue a new
number when your current license expires (every 4 years) so it will be
2006 before everyone has their numbers changed.
Eric
--
Eric J. Christeson <echriste@702com.net>
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html