Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

verifySSN: Area code can be larger than 740 #2970

Open
jakubsuchy opened this issue Aug 21, 2023 · 2 comments · May be fixed by #2971
Open

verifySSN: Area code can be larger than 740 #2970

jakubsuchy opened this issue Aug 21, 2023 · 2 comments · May be fixed by #2971

Comments

@jakubsuchy
Copy link

The United States Social Security Number area code used to startwith a number less than 740 bt this is no longer the case:

https://www.ssa.gov/history/ssn/geocard.html

There are now routinely SSNs with area code larger than 740.

https://github.com/SpiderLabs/ModSecurity/blob/60f802e4801c8a4fee8e2caac90462e53651971f/src/operators/verify_ssn.cc#L103
jakubsuchy added a commit to jakubsuchy/ModSecurity that referenced this issue Aug 21, 2023
@jakubsuchy
Update verify_ssn.cc to fix new format
7086751 
Fixes owasp-modsecurity#2970
@jakubsuchy jakubsuchy linked a pull request Aug 21, 2023 that will close this issue
Open
@martinhsv
Copy link
Contributor

Hello @jakubsuchy ,

My skim of the documents suggests that the U.S. government is still not issuing numbers in the 900s. Should we perhaps consider including that in the if statement (instead of only rejecting '666')?

@jakubsuchy
Copy link
Author

This doc says they now issue those I think: https://www.ssa.gov/employer/randomization.html

"Previously unassigned area numbers were introduced for assignment excluding area numbers 000, 666 and 900-999."

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Update verify_ssn.cc to fix new format jakubsuchy/ModSecurity
2 participants
@jakubsuchy @martinhsv