This would indeed be the most effective solution

to the immediate problem, however there would still

exist the problem of compromised personal data

being used to create NEW accounts, in which the

fraudster could now properly authenticate against.

This is not to mention the outcry of legitimate

card holders about the added inconvenience.

PCI needs to be enforced, Visa/Mastercard/AmEx

need to start handing out sanctions against

merchants that aren't up to snuff. As a matter of

fact, it could be said that Visa/Mastercard/AmEx

are providing a disservice to their customers each

day they delay enforcing PCI.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/481/1917#1917