Just for fun, seems easily susceptible to a man-in-the-middle attack. Just take a postcard, copy their code, discard the original card, or just send the original later than the copy. :)