nanog mailing list archives

O/T: fake identity seal was: RE: M$ CD patches


From: "Michel Py" <michel () arneill-py sacramento ca us>
Date: Sun, 22 Feb 2004 20:20:15 -0800


By popular demand, I put back the "fingerprint" version of the authentic
fake identity seal; go to http://arneill-py.sacramento.ca.us/ move the
mouse cursor over the yellow padlock on the left. Might look a little
bright on some platforms, gamma 1.8. My HTML is not quite sophisticated
enough so it can detect Macs and pop a 2.2 gamma image instead.

Enjoy!

Michel.


-----Original Message-----
From: owner-nanog () merit edu [mailto:owner-nanog () merit edu] On Behalf Of
Michel Py
Sent: Saturday, February 21, 2004 3:31 PM
To: Sean Donelan
Cc: nanog list
Subject: RE: M$ CD patches


Sean Donelan wrote:
Regardless of the distribution method, geniune Microsoft
patches are always cryptographically signed by Microsoft.
Whether consumers can figure out how to check the signature
is a different question.

Lots can't. I recently put a fake "identity seal" on my personal web
site (go to https://arneill-py.sacramento.ca.us and put the mouse cursor
over the padlock on the left).

It's completely bogus: not only the artwork has been greatly inspired by
Comodo's thing (view the real thing here:
http://www.instantssl.com/ssl-certificate-products/ssl-certificate-trust
logo.html) when the actual SSL certificate comes from freessl.com, but
it also works even if you view the insecure page
http://arneill-py.sacramento.ca.us/.

Besides, I do not have a credit card processing system, although I do
accept donations in cash and gold bullions.

So, what you're looking at is nothing more than a little photoshop and
javascript.

Guess what: I have received many questions that say in substance "how
much does it cost to get the same seal as yours and can you come install
it on my web server?"

Michel.


Current thread: