4 ms·
Kinda is their fault... the recipient might be the dictator but the sender can choose not to play or can display a checkbox to consumers authorizing an unsafe t
by jabroni_salad 3y ago
Kinda is their fault... the recipient might be the dictator but the sender can choose not to play or can display a checkbox to consumers authorizing an unsafe transmission so they can make an informed decision. Instead they just do it and you assume the store is secure because isn't store security mostly a solved problem at this point?
Those of us who transact directly with the hotel instead of booking agents stay winning I guess.
- vkou 3y agoIf the sender doesn't play ball, they won't have any business. Third-party aggregators and hotels are a complete shit-show. But as long as I can save $30 on my trip, I will keep using them...
- jabroni_salad 3y agoI am not a marketing professional but what about something like this. "Our booking service is xxx MM consumer's first choice for planning trips. Get access to our customer base and reduce administrative workload by adding our integration to your point of sale system. 4 competitors within 5 miles of you are already booking with us!"
- xur17 3y agoEspecially since I have zero fraud liability as a customer. No real incentive for me to care. The real solution is for the credit card companies to lay down requirements for these merchants (no storing in plain text).
- jacquesm 3y agoThey already do so. The card data is not stored 'in plain text', but encrypted at rest. But for the Hotels there are interfaces that allow these to be exposed to the Hotel employees (accesses of such information are logged). Just prior to displaying them they are decrypted.
- callalex 3y agoYou have your facts wrong. https://arstechnica.com/information-technology/2023/02/mysterious-leak-of-booking-com-reservation-data-is-being-used-to-scam-customers/?comments=1&post=41615090 https://arstechnica.com/information-technology/2023/02/myste...
- jacquesm 3y agoWould it pain you to spell out which of the facts are wrong?
- callalex 3y agoFor the “encrypted at rest” statement I guess it depends on your definition of “at rest”. Email passes through many hands, and random mom-and-pop shops definitely aren’t using PGP. So any emailed credit card information is being stored on many different computers. In theory those kinda of logs should be purged regularly, but who knows.
- jacquesm 3y agoLooks to me like you got your facts wrong. And your definitions too...