Forums
Classic WTF: Security By Letterhead
by in Feature Articles on 2018-09-03It's a holiday in the US, so we're turning back the clock a bit.
How do you make sure nobody issues an unauthorized request for a domain transfer? This registrar has serious security to prevent just that kind of event. You know this must be a classic, because it involves fax machines. Original -- Remy
Security through obscurity is something we've all probably complained about. We've covered security by insanity and security by oblivity. And today, joining their ranks, we have security by letterhead.
John O'Rourke wrote in to tell us that as a part of his job, he often has to help clients transfer domain names. He's had to jump through all kinds of crazy hoops to transfer domain names in the past; including just about everything except literally jumping through hoops. After faxing in a transfer request and receiving a rejection fax an hour later, he knew he was in for a fight.
Christian R. was in trouble. Despite his experience across hardware and software, desktops and server clusters, thumb drives and SANs, he hadn't found any freelance work in weeks. It was clear that he'd have to figure something out to pay the bills.
Their first correspondence was an unsolicited call from Vilhelm. "I'm calling because I hear you do web work." Gaye B. responded that yes, he did, and began collecting whatever scant details he could about the project, telling Vilhelm he'd need some time to prepare an estimate. Vilhelm casually mentioned "you know, your last name sounds familiar. You wouldn't happen to be the son of Bob and Alice, would you?" He was. "Oh, that's great! Our parents are friends, they met on vacation at the coast last year!"
"I write these SOPs for a reason," Ken barked, "and that reason isn't just so you can violate them!" Ken had the attitude of a drill sergeant from basically any movie with a cliché terrifying drill sergeant. In a previous career, Ken was a naval officer, and his rigid adherence to well-defined procedures was unshakable.
Owein R. knew that security at the government facility was going to be a big deal, but it wasn't clear how big a deal it was going to be until he started his job.