[ale] OT: am I paranoid?
Geoffrey
esoteric at 3times25.net
Thu Oct 9 10:31:38 EDT 2003
Jonathan Rickman wrote:
> On Thursday 09 October 2003 09:22, Geoffrey wrote:
>
>>Okay folks, quick question. A credit union I belong to has started a
>>contest on an online newsletter. The contest consists of posting the
>>last 5 digits of 5 different credit union members SSN in the webpage.
>>If you find your 5 digits there, you win. Now I know it's not the whole
>>thing, but I personally have a problem with this.
>>
>>So, thoughts? We can take this to private email please..
>
>
> No. You're not paranoid. Disclosing more than the last 4 digits is
> considered a risk. I once saw a reference that explained why in great
> detail. If I can dig it up, I'll pass it along.
Thanks.
--
Until later, Geoffrey esoteric at 3times25.net
Building secure systems inspite of Microsoft
More information about the Ale
mailing list