my tweets are severely limited by my lack of understanding of what I am doing.
Anecdotally from twitter, it seems many people are having problems getting credit reports via http://annualcreditreport.com . Mine failed all 3
-
I wouldn't use that website. It had (possibly still has) an unpatched Apache Struts install since earlier this year. http://xss.cx/2017/03/12/txt/cve-2017-5638-annualcreditreportcom-exploit-poc-content-type-http-header-example.html …
The big three US credit agencies share it to comply with the Fair and Accurate Credit Transactions Act, but they just left it exploitable.
