Hot answers tagged

4

Since SSN has only 9 digits, changing hash function will not suffice because attacker can simply apply the function to all 10^9 SSN's and match the result against the database. One option is to use a permutation cipher, destroying the private key afterward. Make sure that the cipher is resilient to known plaintext attack (since attackers are likely to know ...


4

I think you should check first if the agreement you have with your customers allow you to reuse and mix their data and in so in which conditions. You can also look at the standard and guideline promoted by of the Dutch DPA or the European Data Protection Supervisor in term of privacy.


2

This is an expansion to this answer, so please give the votes to that one. Another option is to generate a private permutation of 10^9 element set using "true" randomness To anonymize the data for sharing AND to keep an id field for joining, you need to make a list of all unique SSNs, generate a random string for each, and then re-write the random ...


2

I would have to disagree with the other answer. It has got to do with a lot more than that. Did your employer at the time know his website was scraping? If so, you are in no trouble at all. Writing code that scrapes a website is not illegal, executing them is. If your employer knew this is how his website was programmed, and he agreed with it, he/the company ...


2

Firstly, the information provided in my answers is for general information purposes only and is not intended to be legal advice for individual situations and should not be relied on in taking legal action of any kind. Merely reading my answers does not create an attorney-client relationship. If you believe you may have a claim or defense based on something ...


1

Since the SSNs you received are already hashed (poorly), why not just replace the existing hashes with random unique strings? That way there's absolutely no way to attack the encryption, since the original data is completely destroyed -- and it solves your collision problem as well (assuming there aren't any actual duplicates in the data). This also assumes ...


Only top voted, non community-wiki answers of a minimum length are eligible