hello, i’m abraham lincoln….okay, yeah, so i’ve been looking closely at the recently hyped ‘fake identity generator‘ that’s drawn attention from both the mainstream as well as the experts (namely bruce schneir, security guru)…it’s become so popular that is has gone from ’shitty url path’ to its own unique domain: fakenamegenerator.com, and it has its own distinct blog to track progress…and the dude has been adding new features like crazy…and the usage is going through the roof…

…so what is this thing? it’s a tool that will draw a set of randomly paired ‘person’ elements from different data stores to create one completely ‘real looking’ fake identity, replete with social security number, mastercard number, date of birth, address, phone, email and full name…all of the data is completely made up, and there were some folks discussing ‘enhancing‘ the service to run the addresses against a quick search on elgoog maps to find out if the street given is ‘real’ and in turn regenerate a fake address until a real one turns up…oh, and dude is also selling the fake names in bulk right now to folks who wish to test ecommerce platforms (though he may make the project open source, still to be determined)

and of course, for those with a little more patience there are much more sophisticated alternatives out there, but they really look more like identity theft than internet theater, so i won’t discuss them too much further (some mentions in my archives though, follow the birthday trail perhaps, or email me if you really want an explanation of what i’m talking about)..

…yeah, so pretty nifty stuff for the social engineers out there looking for new free toys to play with, but what really caught my attention here is the code that the fakenamegenerator’s creator is using to whack out those fake mastercard numbers…the site uses graham king’s php credit card number generator ….from graham, “Command line Python program, PHP script, and Javascript script to generate valid (MOD 10) credit card numbers. Usefull for testing e-commerce sites. (Note: You can’t actually buy anything with these). Should run on any platform.“…if you just want to see how it works when generating results and don’t wanna touch code, check out his online version of the generator (much more than mastercard on the list)…these conform to the luhn formula (aka ‘mod10′) which confirms the final ‘check digit’ in the stringy sequence of numbers, meaning that if well executed, then the numbers could be used to validate but will fail if a transaction is actually run…

think about that for a second….how long will it be before i can meld my fake online identity with my (hypothetically) boss vt-1 transformer, spice it up with a little caller id spoofing and manage fake identities in analog and digital from the comfort of any relatively quiet place? this is a dark feeling, sorry, speaks to that whole ‘living off the grid’ future that everybody used to make fun of…

Powered by Gregarious (21)

Share This

Some similar nonsense, if you like that kind of thing:

    None Found

Links that were in this post, but only if there were any: