Re: Verified by ....

[<michael.blanchard () emc com>]

It's just a bit harder to counterfeit with the little heat sensitive doo-dad on it.

It also gives "normal" people the warm and fuzzies.  People like things like that, makes them feel that the company is 
serious about security.  In reality, it's no better than a picture of my big toe on the thing....  or, as you say, the 
words printed "I'm genuine"

  I always get a kick out of the "certificates of Authenticity" that people give with an autograph or some other 
collectable item.  Hell, I can print a million of those certificates and have someone's signature printed on them 
too... with a cool color shifting "official seal" too!

 Mike B

Michael P. Blanchard
Senior Security Engineer, CISSP, GCIH, CCSA-NGX, MCSE
Office of Information Security & Risk Management
EMC ² Corporation
32 Coslin Drive
Southboro, MA 01772


-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org] On Behalf Of Drsolly
Sent: Monday, April 04, 2011 3:41 PM
To: funsec () linuxbox org
Subject: [funsec] Verified by ....

I just got a moneygram. There's this cute thing thats a pink stop sign, 
it's heat sensitive, if you touch it, it fades and the reappears. It tells 
you so on the moneygram, and it's true.

I'm confused about why they think that this is any different from a 
document that says "I'm genuine".

And I still can't get my bank to believe that asking me for my date of 
birth is any kind of evidence that I am who I say I am.


Don't these people have *any* kind of security theory training? Or even 
any common sense?

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.