5 ms·

unfortunately this is just becoming the norm and companies aren't held accountable for losing data. every account i make now is with a catchall domain and a ran

unfortunately this is just becoming the norm and companies aren't held accountable for losing data. every account i make now is with a catchall domain and a randomly generated password

693471 7y ago
This helps but I am still wishing that the Final credit card would have survived because it allowed you to generate new card numbers per each vendor AND set hard limits on transactions per month, one time use, etc etc. edit: still doesn't solve the issues with the other personal identity problems that comes with all of this... I just want an anonymous payment method. Is that so hard? I don't want any business to ever know who I am.
- Whatarethese 7y ago
  Privacy.com might offer close to what you're describing.
  - 693471 7y ago
    Thank you, this looks promising. It does require bank account access because it's basically a proxy debit card, but it's better than nothing.
    - AdieuToLogic 7y ago
      > It does require bank account access because it's basically a proxy debit card, but it's better than nothing. I would be wary of any service which requires this level of access to your finances. If the offering is determined worth it, at least set up a separate account with your bank which is not "linked" to any others and transfer into it as needed via standard banking mechanisms.
umvi 7y ago
> unfortunately this is just becoming the norm and companies aren't held accountable for losing data How would a company be held accountable for losing data? Fining them? Paying out to users?
- ziddoap 7y ago
  Fining a company for gross negligence of assets they are entrusted with seems like a fair path to explore for starters.
  - umvi 7y ago
    It seems like you would have to prove it is gross negligence though. It's not their fault if they lost a database to a 0day or if they were otherwise doing everything reasonably correctly.
    - ziddoap 7y ago
      Well... Yes. That is how it usually works. You prove gross negligence, they pay a fine. They prove that they were doing everything reasonably in their power, they don't pay a fine.
    - AdieuToLogic 7y ago
      >It seems like you would have to prove it is gross negligence though. Storing PAN's in clear text is a violation of many, if not all, payment networks, be it done by a Merchant or any intermediary. The citation I will show below is MasterCard specific, but should not be considered restricted to that network. > It's not their fault if they lost a database to a 0day or if they were otherwise doing everything reasonably correctly. Actually, it very well can be. And, in this case, it almost certainly is the Merchant's liability (fault) due to not adhering to security standards. For reference regarding same, see the MasterCard "Security Rules and Procedures" document's "Chapter 10 Account Data Protection Standards and Programs"[0]. 0 - https://www.mastercard.us/content/dam/mccom/en-us/documents/rules/SPME-Manual-February-2019.pdf#_OPENTOPIC_TOC_PROCESSING_d94e8528 https://www.mastercard.us/content/dam/mccom/en-us/documents/...

unfortunately this is just becoming the norm and companies aren't held accountable for losing data. every account i make now is with a catchall domain and a randomly generated password

693471 7y ago

This helps but I am still wishing that the Final credit card would have survived because it allowed you to generate new card numbers per each vendor AND set hard limits on transactions per month, one time use, etc etc. edit: still doesn't solve the issues with the other personal identity problems that comes with all of this... I just want an anonymous payment method. Is that so hard? I don't want any business to ever know who I am.

Whatarethese 7y ago
Privacy.com might offer close to what you're describing.
- 693471 7y ago
  Thank you, this looks promising. It does require bank account access because it's basically a proxy debit card, but it's better than nothing.
  - AdieuToLogic 7y ago
    > It does require bank account access because it's basically a proxy debit card, but it's better than nothing. I would be wary of any service which requires this level of access to your finances. If the offering is determined worth it, at least set up a separate account with your bank which is not "linked" to any others and transfer into it as needed via standard banking mechanisms.

umvi 7y ago

> unfortunately this is just becoming the norm and companies aren't held accountable for losing data How would a company be held accountable for losing data? Fining them? Paying out to users?

ziddoap 7y ago
Fining a company for gross negligence of assets they are entrusted with seems like a fair path to explore for starters.
- umvi 7y ago
  It seems like you would have to prove it is gross negligence though. It's not their fault if they lost a database to a 0day or if they were otherwise doing everything reasonably correctly.
  - ziddoap 7y ago
    Well... Yes. That is how it usually works. You prove gross negligence, they pay a fine. They prove that they were doing everything reasonably in their power, they don't pay a fine.
  - AdieuToLogic 7y ago
    >It seems like you would have to prove it is gross negligence though. Storing PAN's in clear text is a violation of many, if not all, payment networks, be it done by a Merchant or any intermediary. The citation I will show below is MasterCard specific, but should not be considered restricted to that network. > It's not their fault if they lost a database to a 0day or if they were otherwise doing everything reasonably correctly. Actually, it very well can be. And, in this case, it almost certainly is the Merchant's liability (fault) due to not adhering to security standards. For reference regarding same, see the MasterCard "Security Rules and Procedures" document's "Chapter 10 Account Data Protection Standards and Programs"[0]. 0 - https://www.mastercard.us/content/dam/mccom/en-us/documents/rules/SPME-Manual-February-2019.pdf#_OPENTOPIC_TOC_PROCESSING_d94e8528 https://www.mastercard.us/content/dam/mccom/en-us/documents/...