funsec mailing list archives

Re: Inmate E-Mail (someone guessed right)


From: Dave Dennis <dmd () speakeasy net>
Date: Wed, 1 Dec 2010 09:39:27 -0800 (PST)

On Wed, 1 Dec 2010, Justin Scott wrote:

You may recall several months ago there was a discussion regarding
"invitations" from a member of a website/service sent by the service on
behalf of one of its users.  A lot of debate ensued and I tried to determine
how best to approach it given a situation where it was the only viable
option given certain circumstances.


In before the deluge of "why the eff do they get to use email, they're in jail,
the scumbags" mail.  almost.

I bet its a challenge to market to prison populations as well as jails.  Not an
easy target to hit, balancing marketing messages for those audiences is probably
a challenge.  Secure, but not so secure they can't audit.  Easy, but not so easy
that they can abuse it.  And so forth.

I'd be a little interested in how you prevent signups from non prisoners who
are going to use this as a spam launch, or try to.  Or how you migrate
ex-prisoner mail out to regular mail once they return to society, if they wanted
to.  Interesting operational details would be fun to learn some time.

It reminds me of the solutions that they roll out for lawyers to send secure
mail that maintains chain of custody.  Perhaps some of the same back-end
features.

Cheers,


Dave D




_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


+------------------------------
+ Dave Dennis, CISSP, CSFA
+ Seattle, WA
+ dmd () speakeasy net
+------------------------------
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: