Letter: Brandeis shouldn't use SSN as ID
To the Editor: While the Nov. 12 article titled, "SSN target for abuse" presented a thorough look at Social Security Number (SSN) usage at Brandeis, it did not offer any reason why the SSN should be eliminated from University records.
A SSN serves two functions: as an identifier and as a password. SSNs are used both to find records and to verify identity. It 's like using your credit card number or UNet password as your name, published on documents far and wide. Except, unlike your UNet password or your credit card number, it is almost impossible to change your SSN.
Imagine if someone in, say, a department store looks at your credit card application - you 've put a SSN, a name, an address and even your mother 's maiden name all on one form. Using this information, a person could pretend to be you, raid your bank accounts, destroy your reputation - even commit crimes in your name.
The SSN was established for one purpose - to administer the Social Security system. Using the SSN as both a unique identifier and as a password is a cruel manipulation of this system that results in huge abuses and even greater potential abuse in the future.
Mark Hewitt is quoted in the article as being surprised that so few students have changed their Brandeis ID number from their SSN to a random number. He suggests that a random number would be harder to remember. When should students ever need to remember their SSN or other number? It is used as an internal identifier only, not something that should ever be posted anywhere else.
Perhaps no one has changed their ID number because the process is so difficult. The Registrar 's website says that a student can only change his or her ID number by bringing a written request to Kutz along with two forms of identification, one of which contains both the person's picture and social security number. Many students do not even have any document that contains both their picture and SSN, a recognition by various states that using the SSN as an identifier and a secret key is bad practice and potentially very harmful. Additionally, students who are employed by the University is not allowed to change their ID number.
It should not be the student 's responsibility to change his or her SSN, it should be that of the University. Brandeis is supposed to protect us and our sensitive information, not reveal it for all the world to see.
Many people do not understand the implications of a public SSN, and we encourage Brandeis to take every precaution to keep this important number safe.
-Adam Battein '04
Digital Freedom Working Group
Computer Operators Group
Please note All comments are eligible for publication in The Justice.