Is your SSN really removed from your new electronic pdf files?

[72Zorad]

Well, I created quite an uproar on another post today regarding security...but I won't go into that:embarrest: Suffice it to say, I'm learning forum etiquette the hard way.

However, while we're on the topic of PII and your TSP files there is something you should know;
Several times the TSP electronic statement has been changed. First they changed it so your SSN last 4 where shown instead of the whole SSN like it originally was. A couple of years ago they 'removed' the SSN 'completely' and replaced it with an arbitrary account number. However, they didn't remove it completely. They didn't take the SSN (and, if I recall, your name) from the PDF metadata. This means anyone with basic skills doesn't even need to open the file, they just have to look at the file metadata to see your SSN. You can't see it in Adobe but fire up of any number of free .pdf reader/writers (Linux is great for this) and there it is right in the metadata.

 

[JTH]

Thanks for the head's up, metadata is a big security problem not easily understood by the average user. As for the previous thread, it wasn't personal, just an observation I found a bit concerning. We have a lot of retired folks here older than me who may not catch these little details, so I felt it was better to speak up just in case. You seem like a nice person with good intentions and that's the impression of you I'm keeping. Hey maybe the start wasn't great, but the second step was awesome, great catch on the SS#, there should be a warning or something posted on their site.

 

[FAB1]

They did this,, they did that,, they went back and did this over that.

This is what the TSP board clowns sqander our money on. Where is the new website? Where is our money going!!?