full-disclosure - Wireless ISPs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: djsnm at djsnm.com (Scott Manley)
Subject: Wireless ISPs

On the other side of things, I've recently encountered internet vendors 
who're reassuring customers that they use HTTPS for online ordering. But 
  when I've ordered something from them they've e-mailed me asking for 
proof of ownership of the card - they either want a fax, or for me to 
e-mail a scanned image of my credit card.

When I ask them they say that their bank is requiring this to combat fraud.

I'd really like to know which bank is insisting that customers send 
credit card info over e-mail - even if it is somewhat obfuscated.

> Most don't.  Even most pronted receipts don't include all the numbers of your credit card any more - but some still do.  Few, but a number >1.