full-disclosure - Is the Bottom Line Impacted by Security Breaches?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed Sep 28 19:54:37 2005
From: frank at knobbe.us (Frank Knobbe)
Subject: Is the Bottom Line Impacted by Security
	Breaches?

On Wed, 2005-09-28 at 10:22 -0400, Kenneth F. Belva wrote:
> In the paper I ask: "If 40 million customer credit card numbers are
> exposed in a security breach at the credit card processor CardSystems, why
> do a significant number of people not cancel their Visa and/or
> Mastercard?"

Simple. The credit card numbers are exposed every time they make a
purchase as well. Now, it someone commits fraud with your name and card
number (which a convenience store clerk can do himself... no
high-profile server breach needed), then the customer is only liable for
minimal damages. The risk and liability lies with the credit card
company.

Perhaps you should ask:
"If 40 million customer social security numbers are exposed in a
security breach at the credit card processor CardSystems, why do a
significant number of people not request new social security numbers?"

After all, there is no limit on liability with fraud on those....

Regards,
Frank

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20050928/c0f561b8/attachment.bin