3 ms·

So I recently learned that registered mail is pretty much the highest quality way to ship anything, with full per-node tracking. This was gleaned after some pro

So I recently learned that registered mail is pretty much the highest quality way to ship anything, with full per-node tracking. This was gleaned after some prodding of some people in a law firm who were discussing shipping woes between fedex, dhl, and certified mail, when someone said "What about red-mail"? I had never heard of red-mail (actually registered mail, called red-mail for the red tags, vs the green certified mail tags), but it was explained to me that at least for some governmental purposes, it is the only acceptable way to ship documents and other things. To me, if I want full "evidence custody chain" style logs of device location, for physical equipment, that would be the way to go. Now, the real question is, how much would you really trust the government mail program vs a NSL or interdiction for implant vs a private company vs a NSL or interdiction for implant. I think there is room for discussion there, but I would tend to side with the government one, because the company will have very little recourse, but the gov entity is likely to be staffed by bone-headed gov employees, who are surprisingly good at bad policy pushback when compared to their private counterparts. Perhaps I'm wrong on that though. Sometimes I find interesting insights into IT by listening to lawyers...

wang_li 11y ago
Unless you have an unsubvertible agent carrying the item, you cannot rely on tracking info. How do you know that the tracking data is actually correct and how do you know that the eight hours it spent sitting in a warehouse in Kentucky weren't eight hours used to install malware?
- nickpsecurity 11y ago
  U.S.P.S. security is good enough on average that intelligence types have been known to use it for classified information. There's so many envelopes going through that USPS security people mainly look for stuff that really stands out in shape, smell, etc. You blend in, then targeting you requires knowing what's on the envelope. Put a countermeasure on that variable to get a decent bit of transport security.

wang_li 11y ago

Unless you have an unsubvertible agent carrying the item, you cannot rely on tracking info. How do you know that the tracking data is actually correct and how do you know that the eight hours it spent sitting in a warehouse in Kentucky weren't eight hours used to install malware?

nickpsecurity 11y ago
U.S.P.S. security is good enough on average that intelligence types have been known to use it for classified information. There's so many envelopes going through that USPS security people mainly look for stuff that really stands out in shape, smell, etc. You blend in, then targeting you requires knowing what's on the envelope. Put a countermeasure on that variable to get a decent bit of transport security.