On: Equifax security freeze PINs are the timestamp of ...

[noway421]

maybe there was no way to save and transfer the pin from one place of the system to another, and the only way to do it is to guess on the other side by timestamp.

pretty hacky implementation but oh well

[rocqua → noway421]

Hash with a secret key (a pepper) solves that. Heck, hashing with a salt or even just plain hashing would be miles better than this.

[scentoni → rocqua]

Hash? I wouldn't trust the folks at Equifax to know the difference between a one-way function, a cannabis concentrate, and a fried potato dish.

[MichaelApproved → noway421]

Carrying around the password wasn't a problem.

There's an option to pick your own password during the previous step but having an automated one is the default option, so a lot of people miss it.