Toolkit

Story: 'Unfixable' Word password hole exposed

• 
• 

Delbrouck's example is perfrect!

"What happens, asked Delbrouck, if Dell sends him an offer, he uses the hack to modify the offer in his favour, then signs it and faxes it back? "

I'm not even going to bother delving into the obvious result - Delbrouck goes to jail for fraud.

Instead lets change the scenario only slightly and say Dell used a locked PDF instead. So Delbrouck makes his own PDF that looks just lke the original except he lowers the quote and locks it with his own password. How can dell prove they didn't send him the altered PDF?

Strong encryption, by itself, does nothing to help prevent his fraud. And, as a 'security expert' Delbrouck should know better.

The fact that he used this lame example raises more questions than his trumpted up security hole.

• 
• 

• 
• 
• 

Full Talkback thread