News for hackers. Stuff that matters.
Re:Why are payment forms so complicated? by Silhouette on Friday March 08, 2013 @09:51AM (#5343697)
Knowledge of the billing address is a means of authentication, as is knowledge of the expiration date and the CVV2.

Right, but requiring that physical products are only ever sent to an address that is known to be associated directly with the card holder, at least the first time when you don't "know" the card holder yet, reduces the likely gain from fraud to near zero for third parties. That is a far more effective deterrent than any minor hurdle in the authentication process.

As they say in Texas, Bring It On. In the United States of America, truth is an absolute defense!

And which truth would that be? If you caused serious damage to a business by claiming this practice made them less secure, I expect they would have no difficulty at all lining up expert witnesses who say they have a very different idea of what makes things more secure. They would have the added advantage that this is a field where lots of people look very carefully at real numbers, so they could probably bring a mountain of statistical data in support of their position.

There are no comments on this comment yet.