Not everyone has the security knowlege to know what is safe. Certainly retailers don't tell their customers what they do to safe-guard their information. Regulation is the key to protection. Quite simply, retailers should not be allowed to store PIN information or transfer it wirelessly without proper encryption. If they do, then they should pay penalties or be liable for breaches.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/160/804#804