[Date Prev][Date Next][Thread Prev][Thread Next][Minivend by date
][Minivend by thread
]
Re: [Fwd: FW: Shopping Carts exposing CC data]
****** message to minivend-users from "Mr. Christopher F. Miller" <cfm@maine.com> ******
On Tue, Apr 20, 1999 at 03:28:30PM -0400, Steve Cockwell wrote:
> ****** message to minivend-users from Steve Cockwell <stevec@sierra.lazarus.ca> ******
Minivend is pretty good this way, at least on UNIX, and the data
it holds s/b as secure as any user data. Yes you can blow it. But
not like all the 666 and 777 files I see typical webmasters installing
because they can't figure out permissions.
<RANT>
Credit cards are FOR untrusted commerce. They are a security
mechanism in an of themselves. That's why they
exist in the first place. While one should not be careless,
they are meant to be used where vendor and seller want the
merchant bank to stand as part of the transaction, to guarantee
it. Credit cards are only risked to the degree any user data
is risked. There is a lot of stuff more valuable than
credit cards; be careful with it ALL.
</RANT>
>
> I received this today, but haven't yet investigated it further - I
> thought the people on this list might find it interesting. I doubt that
> minivend would be included in this list (knowing what little I do about
> how it handles CC Info) but maybe Mike could make some sort of official
> comment about how secure CC info is in Minivend, and what a stupid
> person would need to do to make CCs world readable... :-)
>
> > Tomorrow ( April 20 1999 ) CNet's news.com should be running a story
> > regarding various commercial and freeware shopping carts that, when
> > installed incorrectly or when installed by amateurs, result in the
> > possible exposure of customer information... and not just a few digits of
> > a credit card number like Yahoo's latest goof - everything is exposed.
> > Name, CC Numbers, home address, phone number, what they ordered, how much
> > they paid etc etc etc.
--
Christopher F. Miller, Publisher cfm@maine.com
MaineStreet Communications, Inc 208 Portland Road, Gray, ME 04039
1.207.657.5078 http://www.maine.com/
Database publishing, electronic commerce, office and internet integration.
-
To unsubscribe from the list, DO NOT REPLY to this message. Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list
