Yahoo! Wallet: Unsafe, Simpleminded and Insecure
Yahoo! provides a web wallet service called “Yahoo! Wallet”, where one can store credit card information. Unfortunately, it can also be used by bad guys to test the validity of the credit card data they have obtained.
Perry E. Metzger ran into trouble when his credit card got stolen. A charge for 1 USD was made to the card – to test if the card is OK – after which the issuing bank invalidated the card. Mr. Metzger’s story about the episode (in the Metzdowd cryptography mailing list) contained this quote, which I found amusing:
“”Yahoo! Wallet”‘s customer service is run out of the Philippines, and has the same keen sense of organization, training and fraud prevention that one might find among kindergarteners with lifelong iodine deficiency.”
No Comments so far
Leave a comment
Leave a comment
Line and paragraph breaks automatic, e-mail address never displayed, HTML allowed:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>