Slashdot Mirror
Online Trust Failing Overall
twitter writes "The BBC and ZDNet are reporting on an RSA poll of 1,000 users about failing confidence in ecommerce. 43% of respondents were reluctant to give details to online sites and 70% said that firms were not doing enough to keep their data secure. The BBC goes on to quote experts who back up the perception, ZDNet claims that action is being taken and is well."
ZDNET is well?
bluespaceradio.com - New Wave, Indie and Alternative
I was born in 1984, a body builder making over 250k a year. Female and my occupation is the fist item in the drop down list. Whats the problem you guys have?
Most people who distrust internet commerce will gladly hand their credit card over to minimum-wage waiters, who disappear into the back room of the restaurant with it for ten minutes. It's all a matter of image and perception.
Have you read my blog lately?
or not taking the security concerns seriously. If you are saving peoples Social Security Numbers and CC Numbers then you should be encrypting that data. Venture to guess how many places actually encrypt that in a database?
But then again i would say most larger places do take these steps. More often than not I won't buy from somewhere I am unsure of or if they are not in the http://www.bbb.org/. Plus, how many people know how to always use SSL when sending sensitive stuff? I would venture my grandparents and mother have no idea.
On a side not to the last statement, i would like to say, office depot does NOT use SSL for their secure communications when you order something from in store.
I think society as a whole doesn't trust any companies any more. Everyone is so sick of the Government screwing them over and companies ignoring the laws these Governments got paid (by other companies usually) to put in place. Lets face it, I don't trust anyone I can't blackmail or back stab and get back whatever I've give them. The world has become like that and it's getting worse and worse.
I like muppets.
I just got a really nice email from a DR. VICENTE A. SOUSA from the DEPARTMENT OF OIL & DOWNSTREAM SECTOR in ANGOLA.
... you know, the email was really long with all sorts of details (kind of like those agreements when you put a CD in the computer) so I just said yes because it's supposed to be easy money. :)
Very polite, humble (he even SAYS so) and
While I'm somewhat surprised the average user pays attention to such things, I'm not surprised trust is failing in light of recent large scale compromises.
Until the industry as a whole adopts a strategy of preventing compromises, this is not going to improve. Most companies would rather pay a PR guy to fix their image after the fact than a security consultant to keep it from happening in the first place. That's certainly not how I want my information taken care of.
I rarely criticize things I don't care about.
From the article: "This survey demonstrates that awareness and action are replacing fear," Robert Holleyman, BSA's chief executive, said in a statement.
How is awareness and action replacing fear when people are afraid to shop/bank online but don't handle their passwords any differently?
Oh, wait... It was an executive who made the statement so all meanings should be reversed.
Reading code is like reading the dictionary - you have to read half of it before you can go back and understand it.
Dear God, ain't this the truth??? I'm a network admin at a large company (please don't ask which), and the password situation here would be laughable if it weren't so sad. I ran LC5 on our hash file here, and was shocked and dismayed at the number of passwords cracked within 10 seconds. I'm constantly finding passwords on sticky notes on monitors and under keyboards, and many users haven't even bothered to change the default Lotus password ('password') to something else! >:(
Last year, a street survey found that more than 70% of people would reveal their password for a bar of chocolate.
That seems to be about the right figure for users in my company.
____
~ |rip/\/\aster /\/\onkey
I think the mistrust comes from people who never receive their Free Vi.a.gra Cheep! in the mail. It's such a shame, that M.ale_Enhanc3ment_P1ll sounded good to me.
Kind of like the great majority of child kidnappings involve a non-custodial parent. But that's not a scary enough story to draw viewers, so doesn't get reported much.
(at this point the child-kidnapping activists will rise up and smite me with their negative mod-point hammers, I'm sure. :)
Have you read my blog lately?
If businesses want people's trust, they need to earn it.
Should online businesses be trusted ?
I myself give out accurate personal data only when I really, really have to, and even then am pretty picky about the companies I work with - both online and offline. If confidence has declined, maybe people are learning...
...as long as Claria says it's okay.
I'm not good in groups. It's difficult to work in a group when you're omnipotent. - Q
I like using MBNA bank's credit card number proxy feature whereby you create a onetime use CC# with a limited spending limit to give out online. It's a great feature for paying at Sam's Shady Online Store with a CC# that has a $30 limit and expires in a month.
I TOTALLY know! I saw a video of this girl who had confidence that this guy WASN'T going to do this thing to her... AND HE DID! I was like, "I SO don't have confidence in the net anymore!" ...I'm sorry, I don't know where that came from. It must be time to go home...
Note: This sig contains nine S's, nine I's and five O's which... means absolutely nothing.
...As I'm currently working on three sites that have a variety of eCommerce worked into them. One is linking to a ridiculous third party all-in-one shopping cart package the client repeatedly insisted on using. I'm having the damndest time trying to ensure that everything is secure and that items being paid for are being flagged properly when they are fully paid for. Because of the hopping back and forth from our server to theirs I'm using browser cookies and I'm not fond of it at all.
I have to ask how does one inspire confidence and secure feelings in visitors to the site? It helps to make sure the site looks nice and has a minimum of spelling errors, but there isn't anything I can think of that will suggest "Hey! We're really a legitimate business and won't just take your money and run" to people who don't know what SSL is.
As someone who likes to buy things online I only trust a handful of sites to accept and process my transactions properly. I know what will keep me from using an online store (no SSL at payment, no multiple protected ways to pay, ridiculous things like having to get a Yahoo! account just to be able to checkout my shopping cart). But I can't put my finger on what keeps me feeling secure in making my transactions after that.
Starkle, starkle, little twink.
I lost my online trust when I fell victim to a particular .cx site.
Here in GA we have ChoicePoint, a company which recently allowed a criminal gang to make off with something like half-a-million IDs.
Only people in California were notified of the leak, because CA has a law requiring notification. Everyone else is going to have to wait 'til their identity gets stolen.
The GA legislature is taking up a bill to require notification of GA residents when their personal information is stolen or accidentally leaked.
Part of the problem, IMHO, is that companies won't tell you when they've shared your information with a non-trusted third party. So, a good first step would be voluntary disclosure.
668: Neighbour of the Beast
I'm not liable for any $$ amount on my credit card or my debit. I'll say, though, I use debit card rather than my credit card. Why? Cause the bank doesn't have as much to lose as the CC company. With the bank it's all your money, with the CC company, it's their's until you pay it back, which means you have one more person in your corner - and with better lawyers, probably ;).
Ladies and gentlemen: this is why you shouldn't trust any legal advice obtained from Slashdot.
All employees must wash hands before seeking equitable relief.
When knowing a number is sufficient to use it (credit cards, SSN), security is impossible.
It is a fact of life that your important numbers hang around indeffinitely in various databases. Unless more than a number is required to use them, it will become impossible to maintain your identity.
I rarely criticize things I don't care about.
In Denmark we have very good consumer protection on online trades. Whenever the card holder challenges a withdrawal, the issuing bank shall reverse the transfer immediatly. Afterwards, the burden of proof for actual goods delivery lies with the bank. The banks of course passes the burden on to the online merchants, so we have very few fradulent online traders here in denmark.
I'm not sure how it works for foreign trades, but as the banks must make the refund, no matter what, the general confidence in denmark is pretty high.
//Wegge
Put your faith in your CC company and their fraud prevention
I think we shouldn't, or at least, I don't want to.
There should be a method of paying that was time-sensitive, say a two-level authentication method that consisted of a PIN and a randomly generated number that changed with time that could only be authenticated by you and your CC company... just like we do with some sensitive computer passwords (and I'd say that Credit Cards ARE a sensitive password for the users). It could one-transaction only.
That would cut the timeframe and opportunity for frauds.
Now that I think of it, I might be able to market this to someone...
There are three kinds of lies: lies, damned lies, and statistics.
The problem is that Credit Card companies, banks and anyone else whose revenue is generated by transaction volume have a vested interest in making transactions easier and more frequent.
As big a problem as fraud is, the reality is that there is far more to be gained from lowering barriers to credit card use than there are to raising barriers. The other sad corrolary is that the real losers when it comes to fraud are the consumers.
We have voluntarily traded security for convenience. Now it seems we want our cake too.
------ The best brain training is now totally free : )
I use debit card rather than my credit card.
Oops. I'm dyslexic. Make that vice versa. I use my credit, rather than my debit.
Despite conventional wisdom, I've discovered you can blame a guy for trying. It's called "attempted murder".
nt