If only we saw this coming.... oh wait... Equifax's data breach of 143M records.

People have been calling for social security number system to be updated. In what world does it make sense to prove your identity with just a username (ss #) and not a password as well?