Skip to content

Comment on BofA mails your PIN to the same address as the card it unlocks

Comments

It's nice to see an example of real life security holes instead of software security holes

I don't know. It's basically software with a sneakernet last hop and mtr would take forever! If by "real life" security, you mean "physical" security, I don't see any physical security issue. Even in the military, this sort of stuff would be handled by crypto guys, not masters-at-arms. As far as physical security of the mail, FWIW, you can ship Top Secret through the US Mail. Just double-envelope it and send it registered.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.