3 ms·
Especially since I have zero fraud liability as a customer. No real incentive for me to care. The real solution is for the credit card companies to lay down re
by xur17 3y ago
Especially since I have zero fraud liability as a customer. No real incentive for me to care.
The real solution is for the credit card companies to lay down requirements for these merchants (no storing in plain text).
- jacquesm 3y agoThey already do so. The card data is not stored 'in plain text', but encrypted at rest. But for the Hotels there are interfaces that allow these to be exposed to the Hotel employees (accesses of such information are logged). Just prior to displaying them they are decrypted.
- callalex 3y agoYou have your facts wrong. https://arstechnica.com/information-technology/2023/02/mysterious-leak-of-booking-com-reservation-data-is-being-used-to-scam-customers/?comments=1&post=41615090 https://arstechnica.com/information-technology/2023/02/myste...
- jacquesm 3y agoWould it pain you to spell out which of the facts are wrong?
- callalex 3y agoFor the “encrypted at rest” statement I guess it depends on your definition of “at rest”. Email passes through many hands, and random mom-and-pop shops definitely aren’t using PGP. So any emailed credit card information is being stored on many different computers. In theory those kinda of logs should be purged regularly, but who knows.
- jacquesm 3y agoLooks to me like you got your facts wrong. And your definitions too...