"It's all about easing the proper use. If you make proper usage complicated in order to deter improper use, then you punish me always for a criminal's occasional actions."
I wasn't sure if your message was meant to be sarcastic or what, but the point is the same: If you want security, you have to sacrifice convenience. When I go into the server room at work, I have to have a set of keys just for that door and my ID to scan at the magnetic reader. Sure, it'd be WAY more convenient for me to just be able to turn the door knob and walk in, but then we lose all the security that my keys and ID card offer. Same goes with online payments. The harder it is for you do something, the harder it is for someone else to do the same thing.
If all you want is convenience, then we should just set the system up so you have to enter your name and then it just gives a list of all the credit cards registered to your name and lets you click on the one you want to use and ask for absolutely no verification that you are you. I, however, don't want to live in that world, I don't care if I have to enter 5 different pieces of information about me so I can make a purchase online. It's probably still faster than driving to the store to get it.
There's always the case of someone having their internet traffic hijacked, but that rarely happens. I like the idea of the virtual credit card thing. I remember hearing about a service similar to that when Amazon was having all their problems.
Merchants always have that "We reserve the right to refuse service to anyone" thing going for them. They can request your ID and if you don't want to show them that, then that can just invoke their right to not serve you. Remember, they are providing a public service. They don't OWE you the right to buy something from their store.
I know this is a REALLY geeky way of doing this, but for anyone familiar with Entropia Universe/Second Life types of games where real money is freely exchangeable for in game money, just make a new character from a public wi-fi spot and register that CC# to that character. Transfer about 500 bucks off it into the game world, "purchase" an item from your legit character for 500 bucks, then transfer the money back out onto your real account where you can withdraw it. It's almost impossible to trace that BS user back to you, because it's just an avatar in a coffee shop somewhere. As long as the game (I use Entropia Universe in all my examples) has it on record that he basically purchased an item from you at a really inflated price, it won't throw up any flags. As far as the money transfer goes, people put in and take out money all the time. Seems easy enough to me.
I think by personal information he meant SSN, Address, Phone Number, important info like that. You guys can know my slashdot nick all you want. I think the system is already BSed anyways. On the back of my Social Security Card, it says that you CANNOT use that card for purpose of identification. However, even at a college I have been asked to show that card as proof that I am me. If a government funded college can do that, what's to stop a bank from giving that out, or a telemarketing company paying for my pn
Slashdot Mirror
"It's all about easing the proper use. If you make proper usage complicated in order to deter improper use, then you punish me always for a criminal's occasional actions." I wasn't sure if your message was meant to be sarcastic or what, but the point is the same: If you want security, you have to sacrifice convenience. When I go into the server room at work, I have to have a set of keys just for that door and my ID to scan at the magnetic reader. Sure, it'd be WAY more convenient for me to just be able to turn the door knob and walk in, but then we lose all the security that my keys and ID card offer. Same goes with online payments. The harder it is for you do something, the harder it is for someone else to do the same thing. If all you want is convenience, then we should just set the system up so you have to enter your name and then it just gives a list of all the credit cards registered to your name and lets you click on the one you want to use and ask for absolutely no verification that you are you. I, however, don't want to live in that world, I don't care if I have to enter 5 different pieces of information about me so I can make a purchase online. It's probably still faster than driving to the store to get it.
There's always the case of someone having their internet traffic hijacked, but that rarely happens. I like the idea of the virtual credit card thing. I remember hearing about a service similar to that when Amazon was having all their problems.
Merchants always have that "We reserve the right to refuse service to anyone" thing going for them. They can request your ID and if you don't want to show them that, then that can just invoke their right to not serve you. Remember, they are providing a public service. They don't OWE you the right to buy something from their store.
I know this is a REALLY geeky way of doing this, but for anyone familiar with Entropia Universe/Second Life types of games where real money is freely exchangeable for in game money, just make a new character from a public wi-fi spot and register that CC# to that character. Transfer about 500 bucks off it into the game world, "purchase" an item from your legit character for 500 bucks, then transfer the money back out onto your real account where you can withdraw it. It's almost impossible to trace that BS user back to you, because it's just an avatar in a coffee shop somewhere. As long as the game (I use Entropia Universe in all my examples) has it on record that he basically purchased an item from you at a really inflated price, it won't throw up any flags. As far as the money transfer goes, people put in and take out money all the time. Seems easy enough to me.
I think by personal information he meant SSN, Address, Phone Number, important info like that. You guys can know my slashdot nick all you want. I think the system is already BSed anyways. On the back of my Social Security Card, it says that you CANNOT use that card for purpose of identification. However, even at a college I have been asked to show that card as proof that I am me. If a government funded college can do that, what's to stop a bank from giving that out, or a telemarketing company paying for my pn