Bruce Schneier would be proud of this security issues …

Lately I ordered two games in UK, like everyone does as they are much cheaper for us Austrian than buying them around here in a store :-D. The store of my choice has already promptly delivered a first package, so I was quite sure that this won’t pose a problem this time. BUT: After placing my order I got a “security mail”:

[…] Due to increased security for online orders, we ask for proof of address to be sent to us before we can dispatch your order.

This is a standard request on international orders, to protect us and our customers from fraud.

Please forward a copy of your bank statement or a utility bill (gas, water, electricity etc.) by email to info@xx-xx-xx-xx.co.uk or alternatively by fax to +44 xxxxxxxx39. […]

My answer was short and sharp: I don’t have any bills as this is my work address and I wouldn’t send one if I had one. First of all they already got the money (via paypal) and secondly this was already the second order. I also sent them a link to my homepage 😉

[…] Thank you for your email and your attachment.

I can now confirm that your order has been taken off hold and was
dispatched on 13/08/2009 ,

I would like to take this opportunity to thank you for your patience and
understanding in this matter.

Please do not hesitate to contact us with any further enquiries […]

So it worked even without the scanned identity proofs 😀 To have an additional good laugh on internet security check out the Bruce Schneier Facts (A good one: “P = NP in Bruce Schneier’s very presence.”).

Appendix: Of course I will not tell you which shop this is. I’m not even allowed to do this. It says so in the email signature. Have a look yourself:

The unauthorised disclosure, copying, alteration or other use of this
message and/or any attachment(s) is strictly prohibited. The originator
does not guarantee the security of this message and will not be
responsible for any damages arising from any alteration of this message
and/or any attachment(s) by a third party or as a result of any virus
being passed on.

Registered Address: MyMemory Limited, FREEPOST 500, St Helier, Jersey,
Channel Islands, JE1 1FH. The information transmitted is intended only
for the person or entity to which it is addressed and may contain
confidential and/or privileged material.