Skip to content

verifySSN: Area code can be larger than 740 #2970

Open
@jakubsuchy

Description

@jakubsuchy

The United States Social Security Number area code used to startwith a number less than 740 bt this is no longer the case:

https://www.ssa.gov/history/ssn/geocard.html

There are now routinely SSNs with area code larger than 740.

https://github.com/SpiderLabs/ModSecurity/blob/60f802e4801c8a4fee8e2caac90462e53651971f/src/operators/verify_ssn.cc#L103

Activity

added a commit that references this issue on Aug 21, 2023
linked a pull request that will close this issue on Aug 21, 2023
martinhsv

martinhsv commented on Sep 19, 2023

@martinhsv
Contributor

Hello @jakubsuchy ,

My skim of the documents suggests that the U.S. government is still not issuing numbers in the 900s. Should we perhaps consider including that in the if statement (instead of only rejecting '666')?

jakubsuchy

jakubsuchy commented on Mar 2, 2024

@jakubsuchy
Author

This doc says they now issue those I think: https://www.ssa.gov/employer/randomization.html

"Previously unassigned area numbers were introduced for assignment excluding area numbers 000, 666 and 900-999."

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Development

      Participants

      @jakubsuchy@martinhsv

      Issue actions

        verifySSN: Area code can be larger than 740 · Issue #2970 · owasp-modsecurity/ModSecurity