Online Trust Failing Overall

twitter writes "The BBC and ZDNet are reporting on an RSA poll of 1,000 users about failing confidence in ecommerce. 43% of respondents were reluctant to give details to online sites and 70% said that firms were not doing enough to keep their data secure. The BBC goes on to quote experts who back up the perception, ZDNet claims that action is being taken and is well."

Re:Sheesh...

[donnyspi]

In most restaurants, even nice 4 and 5 star ones, they disappear with your CC. I have never seen people get up after putting their CC in the black leather folder thingy and follow the waiter to the register. I'm sure you are legally allowed to, but never really invited to.

Re:Sheesh...

[gambit3]

I agree. I also think of all those times people give their SSN to work-study college students because that's what the university uses as ID. I know some of that is changing, but in some places it is still widely in use.

Like the parent poster said.. it's all a matter of perception.

Re:A lot of the problem is bad design

[EnronHaliburton2004]

or not taking the security concerns seriously.

In my experience during the last few dark years of the dotcom bust, too many of the people responsible for security were canned. I had to quit my last job after 6 months because my suggestions on security -- Simple things such as "Don't use Telnet. Use SSH." and "You really shouldn't 'chmod -R 777' everything", were seen as a barrier to progress.

I speak to too many technical managers who don't understand why opening non-anonymous FTP is a bad thing, when everything else is done over SSH or a secure VPN connection. When I discuss SFTP, they scratch their head and drool a little bit, and it's clear they don't understand the threat of cleartext passwords ...

Scary...

Re:Who Cares?

[EspressoMachine]

I use debit card rather than my credit card.

Oops. I'm dyslexic. Make that vice versa. I use my credit, rather than my debit.

Re:Proxy CC#

[Jah-Wren Ryel]

MBNA, Citi and Discover all use the same platform, it is provided by Orbiscom [orbiscom.com]. I think there are probably some other banks too, those are just the big ones I know of. Oddly enough American Express used to have a similar program and cancelled it.

I've been using the MBNA version for many years and hundreds of transaction, and have not had a single fraudulent charge since I started. If they would come up with a version that let me use it at brick & mortar stores, with real plastic, I would be ecstatic.