Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Court filings double estimate of TJX breach
Robert Lemos, SecurityFocus 2007-10-26

Significant security shortcomings led to the data breach at retail giant TJX -- a breach which credit-card companies now say compromised more than 94 million accounts, according to court documents made public on Thursday.

Comments Mode:
Why store the card numbers? 2007-10-28
Anonymous
As far as I understand, shops like Amazon are allowed to store your credit card number and the expire date, in order to make 1-click shopping work.

If so, why are they allowed? It should be simple to generate a ticket when the card is validated the first time. The ticket could then be used to debit the card for the following transactions.

It wouldn't be of much use to steal the ticket, since it would only be valid to credit the cash to the company from which it was stolen.

Just my thoughs...

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11493/34883#34883







 

Privacy Statement
Copyright 2009, SecurityFocus