Re: Electronic signatures and watermarking?

From: Atom 'Smasher' (atom_at_suspicious.org)
Date: 10/28/04

  • Next message: AndrewC: "RE: possible rooted systems" 
    Date: Thu, 28 Oct 2004 14:35:25 -0400 (EDT)
To: security-basics@securityfocus.com

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA256

    On Wed, 27 Oct 2004, GuidoZ wrote:

    > Depending on how technical and secure you're looking for, I'd say do
    > some poking around the bank/check industry. After all, they are quite
    > concerned with fraudulent documents getting around.
    >
    > I forget the exact website but there is an entire site based on a secure
    > paper and printing/signing. Some Googling will probably reveal it. Once
    > again, depending on your exact worries and concerns, using special paper
    > might be overkill. However, I'll betcha the bank industry (along with
    > check books and such) will lead to a wealth of information.
    ===================

    <RANT>

    i'm not impressed with banking technology when it comes to paper, and much
    less impressed now that CHECK21 is being implemented.

    banks have something that the rest of us don't: the rule and force of law.
    aside from the usual laws that protect all of us against fraud, banks are
    protected by special laws and special branches of law enforcement. when it
    comes down to it, that may be a bigger deterrent against fraud than what
    kind of ink or paper they're using.

    from a security perspective, CHECK21 is a joke. i'm looking forward to the
    first case where CHECK21 evidence is thrown out of court because it
    amounts to hearsay, not physical evidence... and there's no chain of
    custody.

    </RANT>

    really, if you want to have a digital signature on a piece of paper, the
    only practical way i can think of is to scan it into a file and sign the
    file. verification could then become a tedious process of comparing the
    actual paper to the signed file, but it can be done. you still have to be
    aware of other factors, such as who has access to the keys, etc.

    - --
             ...atom

      _________________________________________
      PGP key - http://atom.smasher.org/pgp.txt
      762A 3B98 A3C3 96C9 C6B7 582A B88D 52E4 D9F5 7808
      -------------------------------------------------

             "In a time of universal deceit, telling the truth
              is a revolutionary act."
                     -- George Orwell
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.3.6 (FreeBSD)
    Comment: What is this gibberish?
    Comment: http://atom.smasher.org/links/#digital_signatures

    iQEcBAEBCAAGBQJBgTvyAAoJEAx/d+cTpVciyFYH/jI5mAAncE/RbM+KFLMioVlR
    WwI9FEeV92deZSLSrd0DYKNTrefTTepjJVO6aVwUlyLUomvaRfwRK/3Kb3vXUegQ
    ZRVr3XlePOyO0DG14IKzkExttYAHoMpdp6F0lDHnKPVlcscybzJltYpbzZfXTulB
    +7g/XXMbsJdwto1eWHNSptq8JhBicFvFkYTBG/gYzLLxEZSZjwrPyTwyCq7AAyS5
    rHU6IEjiFEhfTKHLiUQ8Mgfi/YiYvowYJVfzMAfIpuzUNzhfMO27Kx9BCfL9i4jO
    owe3Dmul6Na/g/tJOCOLuwJ67c9eE3B5Fno6CqHJbi9dE8+NpwRmtAZUuNl6ygw=
    =sWg5
    -----END PGP SIGNATURE-----

  • Next message: AndrewC: "RE: possible rooted systems"
    • Quantcast