CC shared secret

Roland Perry ukcrypto at chiark.greenend.org.uk
Wed, 6 Aug 2008 13:54:40 +0100


In article <4899840C.3040608@pelicancrossing.net>, Wendy M. Grossman 
<wendyg@pelicancrossing.net> writes
>What frosts me is that adding VfV to the list of hoops you have to jump 
>through to put through a purchase doesn't make the bank any less likely 
>to decide the transaction is dubious

There's the other aspect which is that if the transaction is rejected as 
"suspicious" (not because any of the passwords were wrong, just a 
purchase outside what they say is your normal pattern) then they don't 
tell the cardholder that their card *may* have been compromised. Which 
is odd because surely the only plausible scenario that it's "not you" 
making the purchase in such circumstances is that the card *has* been 
compromised, and shouldn't you be warned?

> and stop your card.

IME they just refuse the charge, but don't do anything else, and 
especially don't stop the card, or issue a new card proactively.
-- 
Roland Perry