[tptacek]

I don't mean simply that the DMV might sell your information; I mean that given your name and some basic information, I can potentially just generate your valid ID. Millions of drivers license IDs are essentially public. It's always a little weird to me to see people treating them like hazmat. I sort of get why? Hazmat whatever you can? But an Illinois drivers license for a 40-year-old is public.

Imagine if, until relatively recently, a social security number was a truncated MD5 hash of your name and birthday. That's the flavor of the problem here.

[smittywerben]

Huh, wow, I never thought about how our licenses are encoded. I agree that it is disproportionate relative to the other records.

Perhaps it's making the same mistake as SSNs in that people use public or easily generated information to verify identity in the first place.