Sunday, October 13, 2013

Security Seal

I spotted this sticker on a gas pump I had never visited before:

Security Seal
Interesting concept; but huge usability and security fail.

1. Prankster decides to slit the seal, easily done since it's a paper-thin sticker. Usability fail.

2. Bad guys can easily re-create the seal and stick it on a compromised machine. Security fail.

I'm sure there are other ways to make these systems tamper resistant and to alert users of a potentially compromised device. Perhaps following on the hard-earned lessons of ATMs would be a good start.

No comments:

Post a Comment