Signatures of customers via Bpost a package is sent or received via internet, to approach. When a part of the signatures is also the name listed. The postal service is going to fix the problems.
The signatures as images on the server of Bpost, the Belgian postal service. Normally, everyone would only signatures are allowed to see relevant to him or her, but because for the file names, an easy-to-find structure is used and there is no authentication, it is also possible to signatures of others to find out. That process could possibly be automated.
It comes in an unknown part of the cases, a combination of signature and name, with which fraud could be committed. That part of the signatures regarding scans of receipts, which is only transparent for the sender of the package.
A part of the signatures, only the signatures of recipients; who are originating from mobile terminals where recipients their signature have to put and that is currently a trial is done.
The Belgian post is going to only the signatures of the mobile terminals to delete: that’s according to spokesman Piet van Speybroeck of Bpost a small effort, because it is a small number of signatures. The images that both the signature as the name indicate, are not taken offline or hidden.
According to Van Speybroeck, that is not needed, because it is ‘only a few of the thousands of” signatures. “We also have never had complaints about this had,” says Van Speybroeck. “And that while the system is already four or five years. A cheater can get other ways.”
According to the Nijmegen professor of computer security Bart Jacobs is the combination of name and signature, however, a ‘good start’ for identity theft. “You could, for example, a change of address can submit a person’s bank, and then credit card applications,” he says. “I would be my signature not like on the internet. But anyway, it is often very sloppy with scanned signatures are handled.”
Update, 16:35: Spokesman Piet van Speybroeck of Bpost to let you know that Friday is decided as fast as possible to a technical solution for the problem. That decision is already taken for publication, according to Van Speybroeck.
For the sake of privacy Tweakers.net names and signatures censored.