Hi Craig,

I'm going assume that Omar wishes to know whether he has the risk to 
consider that someone may send him an apparent, but fake e-gold spend batch 
number when pretending to pay him.

My response (to him and others, not to you Craig - you're a security guru!) 
is to remind all that in any e-mail exchange pertaining to a sale / 
purchase of goods or services, you need to check your account for the 
actual spend!

Of course, in the case of trustworthy, known people like Craig, one is 
tempted to be lazy and provide the goods or service without checking. But 
if the known, trusted sender has not used PGP (or equivalent) to digitally 
sign (authenticate) the message then you don't *really know* that it was 
your friend who sent it! Even the presence of secret details only you and 
him or her know may be merely the result of compromised security / snooping 
on their (or your) e-mails by anyone on a network near the sender or 
recipient - especially at an ISP's mail or proxy server, or at a government 
agency that might be sifting through message traffic or TCP/IP packets.

At 07:48 AM 13/03/2002 -0600, Craig wrote in response to "Omar Tahiri" 
<[EMAIL PROTECTED]>:
<SNIP>
> > do you knw if there is any way to guess a batch number on egold?
> > thanks omar
>
>I'm curious... Why do you want to be able to predict a batch number?
<SNIP>

Ian Green
http://www.clicktwocents.com/?107242
e-gold, e-silver, e-platinum, e-palladium
Elemental, my dear Watson!


---
You are currently subscribed to e-gold-list as: [email protected]
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.

Reply via email to