<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Security Review: Michael&#8217;s Toyota Service Center</title>
	<atom:link href="http://cubist.cs.washington.edu/Security/2008/03/14/security-review-michaels-toyota-service-center/feed/" rel="self" type="application/rss+xml" />
	<link>http://cubist.cs.washington.edu/Security/2008/03/14/security-review-michaels-toyota-service-center/</link>
	<description></description>
	<pubDate>Fri, 16 May 2008 17:05:05 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
		<item>
		<title>By: John Turner</title>
		<link>http://cubist.cs.washington.edu/Security/2008/03/14/security-review-michaels-toyota-service-center/#comment-5168</link>
		<dc:creator>John Turner</dc:creator>
		<pubDate>Tue, 15 Apr 2008 13:32:47 +0000</pubDate>
		<guid isPermaLink="false">http://cubist.cs.washington.edu/Security/2008/03/14/security-review-michaels-toyota-service-center/#comment-5168</guid>
		<description>Nice analysis. 

My dealership is completely different. To pick up your car, even if it is ready and you know its ready, you have to meet with your service advisor to go over the bill.

Second, you don't get anything unless you pay the bill.

Third, after you pay the bill, they give you a ticket with a number on it, and they radio back to a porter to bring your car up.

Fourth, when the porter brings your car up, you have to give him/her the ticket you got after paying your bill...no ticket, no vehicle, even if you have a convincing story.

Threat of consequences isn't all that much of a deterrent if you ask me.

Getting a valid plate is easy...all you have to do is swap plates with another vehicle that looks like the one you stole.  Check big parking lots like shopping malls, airport parking lots, hotels, etc.  Find a vehicle like yours (pretty easy to do unless you're driving a Bentley or something) and swap the plates.

Even better...carry with you a few temp forms that most DMVs issue for temporary plates.  Any inkjet printer can print out a reasonable facsimile.  In my state, for example, its just a form with a date written on it using a Sharpie.  Steal a vehicle, take the plate off, fill out a date on your fake form for 4 or 5 days in the future, and slap the fake temp form in your back window.</description>
		<content:encoded><![CDATA[<p>Nice analysis. </p>
<p>My dealership is completely different. To pick up your car, even if it is ready and you know its ready, you have to meet with your service advisor to go over the bill.</p>
<p>Second, you don&#8217;t get anything unless you pay the bill.</p>
<p>Third, after you pay the bill, they give you a ticket with a number on it, and they radio back to a porter to bring your car up.</p>
<p>Fourth, when the porter brings your car up, you have to give him/her the ticket you got after paying your bill&#8230;no ticket, no vehicle, even if you have a convincing story.</p>
<p>Threat of consequences isn&#8217;t all that much of a deterrent if you ask me.</p>
<p>Getting a valid plate is easy&#8230;all you have to do is swap plates with another vehicle that looks like the one you stole.  Check big parking lots like shopping malls, airport parking lots, hotels, etc.  Find a vehicle like yours (pretty easy to do unless you&#8217;re driving a Bentley or something) and swap the plates.</p>
<p>Even better&#8230;carry with you a few temp forms that most DMVs issue for temporary plates.  Any inkjet printer can print out a reasonable facsimile.  In my state, for example, its just a form with a date written on it using a Sharpie.  Steal a vehicle, take the plate off, fill out a date on your fake form for 4 or 5 days in the future, and slap the fake temp form in your back window.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
