All your post are belong to us
Posted 4 months, 2 weeks ago at 11:35 am. 1 comment
Visited the good ol’ post office on Saturday because I wanted to find out if they could “forward” my mail delivered to my PO Box elsewhere. They do, and it’s called their “redirection” service and it only costs R33 per month to send your mail anywhere else in South Africa - pretty good. However they should probably look at securing this, as I was able to set this up without showing any ID or any security questions asked - interested in getting your ex-wifes mail? keen on stealing your neighbours penthouse subscription? nice little tool to support the little identity theft attack you were putting together? Very worrying indeed. A complete exploit would be to implement a full man-in-the-middle attack where you could sniff the mail (via redirection to your mail box), and then somehow have it delivered to the final destination (i.e. avoiding the redirection second time) - anyone have a PO Box they are not using?
Dominic White Jul 7th 2008
Love how ironic the slogan becomes. It is interesting to note that most physical and logistical details for most companies in SA seem to display an equal lack of authentication.