Thread: Useing the firearms register

Originally Posted by Rushy

Agreed but needing to have a RealMe username and password and 2FA certainly is a failure of the system in my view when there are so many other government issued ways to verify who I am. I am sure we will not agree on that bit.

Your FAL# or Drivers Licence# are not secure info at all. They are physical items that I'm assuming are in your wallet. So now someone who has nicked your wallet has those details and can ring up the FSA and say they are you...
2FA is one of the best and easiest ways to secure stuff. Yes it can be spoofed this day and age but that's beyond the realm of randos who have got your username/account.

Originally Posted by Coop

Your FAL# or Drivers Licence# are not secure info at all. They are physical items that I'm assuming are in your wallet. So now someone who has nicked your wallet has those details and can ring up the FSA and say they are you...
2FA is one of the best and easiest ways to secure stuff. Yes it can be spoofed this day and age but that's beyond the realm of randos who have got your username/account.

What a crock of crap Coop, my wallet has not been stolen and even if it had been and the offender then rang the FSA making out that they are me what are they likely to learn given that I have not registered my firearms. It is the combination of the knowledge of those two license numbers plus my passport number (now the offender has to break into my house and successfully get into the correct safe out of seven in the house) and my military service number (now the offender has to hack into Defence Force records or read my mind) that affords the ability to prove who I am that I suggested in my post above.

2 factor what crap if my phone got stolen and they got my realme the 2 factor in most cases is a cell number for a texted code. Bam they have everything they need.

Originally Posted by Happy Jack

2 factor what crap if my phone got stolen and they got my realme the 2 factor in most cases is a cell number for a texted code. Bam they have everything they need.

Is your phone not locked? You can also remotely brick your phone in about a minute if you know it's been stolen.

Mines always locked but I don't carry it 24-7 so it could get stolen and I might not know straight away. Lots of us older folks are like that

Originally Posted by Happy Jack

Mines always locked but I don't carry it 24-7 so it could get stolen and I might not know straight away. Lots of us older folks are like that

It's good that you lock it. It's pretty hard to get into a locked phone. I'm being unironic here too. I'm lazy and my phone is unlocked a lot of the time but it's usually on my person at all times as I'm a stupid millennial.

As a web developer 2FA does remove over 99 percent of attempted account hacks. Most hacks are done automatically using bots and they just look for low hanging fruit while checking a bunch of login combinations and ignore any that come up with a 2FA, The registry itself will most likely be compromised before a single users credentials and 2fa are spoofed. Simply because the effort involved for a single users gun ownership details isn't worth the effort. The best thing you can do is use non identifiable information in your passwords and have them 10+ characters long. And never reuse passwords from your other accounts.

Originally Posted by Rushy

It gets worse! It turns out that an efficient member of my household was able to tell me my username and password (which I had correct except for upper vs lower case characters). So I just used the correct username and password and fuck me dead the RealMe website now wants me to call them to “add a second-factor authentication”. When did the world become so fucked up?

At any given point in time, if you are a government agency, talking to me on the telephone, I can give you much information issued by the NZ government that in combination is extremely likely to only be known by me (e.g. my unique drivers license number, my unique firearms license number, my IRD number, my unique passport number, my unique military service number ad infinitum (superannuation, veterans affairs etc) so why the fuck can you not trust that it is me when you are talking to me particularly when the reason for the phone call is for me to provide you with information that you want to record which is known only to me. For fuck sake this is so screwed up.

It’s like buying a bottle of wine from Countdown, er Woolworths or whatever, why can’t I just show my Winnie Card, a 74 yr old in an 18 yr old body, with grey hair and cranky, it drives me nuts

Originally Posted by Rushy

It gets worse! It turns out that an efficient member of my household was able to tell me my username and password (which I had correct except for upper vs lower case characters). So I just used the correct username and password and fuck me dead the RealMe website now wants me to call them to “add a second-factor authentication”. When did the world become so fucked up?

At any given point in time, if you are a government agency, talking to me on the telephone, I can give you much information issued by the NZ government that in combination is extremely likely to only be known by me (e.g. my unique drivers license number, my unique firearms license number, my IRD number, my unique passport number, my unique military service number ad infinitum (superannuation, veterans affairs etc) so why the fuck can you not trust that it is me when you are talking to me particularly when the reason for the phone call is for me to provide you with information that you want to record which is known only to me. For fuck sake this is so screwed up.

You can just thank your lucky stars that you do not have to deal with Government departments that we are forced to communicate with: District Councils, Regional councils, MBIE, MPI, IRD. They all have fucked up systems that do not operate as advertised

Originally Posted by zimmer

Been signed up to myIRD for years. Use it to prepare my tax return prior to sending to accountant to finalise. What I do myself helps to reduce the accountant's fees for my tax return. And also to check that IRD figures agree with mine. Sometimes they are out but usually only by cents. Don't trust them.

Had a query re overseas income a month ago. Submitted query thru MyIRD and got a reply within their advised 14 days Totally painless. Original sign up was simple, I'll hazard at a guess, easier than RealMe. I could see however that if people haven't got great computer skills their systems would be shite.

The surprising thing to me, when I first signed up to MyIRD is how much detail they have of your income. One of my bank accounts which only earns a few cent interest a year. It was all there. Banks of course are required to submit that info monthly.

Also have had a RealMe login for over 20 years. Part of my trade rego. Use it to also access my pension details. Also painless to access.
No, I'm not about to rush in to register my firearms.

We do the same - that's the royal we as in my wife sorts all that and generally it's complete and accurate no errors. Still a circa $650 rubber stamping exercise every year though, but at least I don't need MyIRD... I just have to ensure all the receipts are flagged and entered each month and income confirmed.

How can your wife view your IRD affairs?

Originally Posted by zimmer

How can your wife view your IRD affairs?

Got you worried has he ?

Originally Posted by zimmer

How can your wife view your IRD affairs?

Wives have a special 6th sense and they can see through solid steel gun safe walls !

Originally Posted by akaroa1

Got you worried has he ?

Nah, after 50 odd years of marriage I'm either immune or to dumb to realise.

Originally Posted by zimmer

How can your wife view your IRD affairs?

Co-director, so getting everything sorted with the accounts kind of leads into everything being sorted with the IRD. Even when I was employed, joint banking so she sees 'everything'... Once the accounts are ready and balanced and GST sorted, there's only vehicle claims left to process in and once that's done the IRD stuff is pretty much straightforward. There might be a slight adjustment, but when you're in a simple LLC arrangement it's very basic. What it does mean is that the company and the wife get the email confirmation by IRD, mine follows up a couple of days later on a thin piece of tree.