<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Verified by Visa: bad for security, worse for business</title>
	<atom:link href="http://www.richardskingdom.net/verified-by-visa-bad-for-security-worse-for-business/feed" rel="self" type="application/rss+xml" />
	<link>http://www.richardskingdom.net/verified-by-visa-bad-for-security-worse-for-business</link>
	<description>Privacy, security and politics in the digital era</description>
	<lastBuildDate>Tue, 27 Jul 2010 19:55:13 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: polly</title>
		<link>http://www.richardskingdom.net/verified-by-visa-bad-for-security-worse-for-business/comment-page-2#comment-260</link>
		<dc:creator>polly</dc:creator>
		<pubDate>Tue, 27 Jul 2010 19:55:13 +0000</pubDate>
		<guid isPermaLink="false">http://www.richardskingdom.net/?p=139#comment-260</guid>
		<description>I&#039;ve just tried to purchase 2 things from different companies but can&#039;t because of the verification password. I know my password and yes I did write it down in an odd place for security. The trouble is that my card was eaten by a faulty ATM so I was given a new one.......I just need to somehow change the dates .....but how?</description>
		<content:encoded><![CDATA[<p>I&#8217;ve just tried to purchase 2 things from different companies but can&#8217;t because of the verification password. I know my password and yes I did write it down in an odd place for security. The trouble is that my card was eaten by a faulty ATM so I was given a new one&#8230;&#8230;.I just need to somehow change the dates &#8230;..but how?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ethel</title>
		<link>http://www.richardskingdom.net/verified-by-visa-bad-for-security-worse-for-business/comment-page-2#comment-258</link>
		<dc:creator>Ethel</dc:creator>
		<pubDate>Mon, 12 Jul 2010 15:34:24 +0000</pubDate>
		<guid isPermaLink="false">http://www.richardskingdom.net/?p=139#comment-258</guid>
		<description>This was a good article to read. Today I spent 15 minutes, an hour, &amp; then another 15 minutes on hold to the Visa Verification line trying to get my password changed, after the forgot password thing blocked me out. I read this article &amp; typed this response during the last phase! I only wanted to pay for my 16-25 railcard, &amp; if I stay on hold much longer I&#039;ll probably have racked up another £26 in phone bills! What makes it worse is the boring, looped music &amp; the woman constantly &#039;apologising&#039; for my situation. Even student finance doesn&#039;t take this long. I&#039;ve only used it once or twice before &amp; had no complaints til now...

Also, it doesn&#039;t actually tell you on the V by V site the number I&#039;m currently calling. I had to be put through via my bank. I have now been on the phone 22 minutes. Not impressed AT ALL.</description>
		<content:encoded><![CDATA[<p>This was a good article to read. Today I spent 15 minutes, an hour, &amp; then another 15 minutes on hold to the Visa Verification line trying to get my password changed, after the forgot password thing blocked me out. I read this article &amp; typed this response during the last phase! I only wanted to pay for my 16-25 railcard, &amp; if I stay on hold much longer I&#8217;ll probably have racked up another £26 in phone bills! What makes it worse is the boring, looped music &amp; the woman constantly &#8216;apologising&#8217; for my situation. Even student finance doesn&#8217;t take this long. I&#8217;ve only used it once or twice before &amp; had no complaints til now&#8230;</p>
<p>Also, it doesn&#8217;t actually tell you on the V by V site the number I&#8217;m currently calling. I had to be put through via my bank. I have now been on the phone 22 minutes. Not impressed AT ALL.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Kevin</title>
		<link>http://www.richardskingdom.net/verified-by-visa-bad-for-security-worse-for-business/comment-page-2#comment-243</link>
		<dc:creator>Kevin</dc:creator>
		<pubDate>Tue, 18 May 2010 16:27:53 +0000</pubDate>
		<guid isPermaLink="false">http://www.richardskingdom.net/?p=139#comment-243</guid>
		<description>Disgusting. Truly.  I&#039;ve never seen a more offensive implementation of a security mechanism on an account.  I&#039;ve been to a couple sites now that don&#039;t even give an option to opt-out.   And I simply can&#039;t bring myself to give in to the system and just hand over my info.  So instead, Discover got my money.  I can&#039;t possibly see how this was deemed a better way to do this than a simple change to the cardholder&#039;s agreement everyone has to abide by in order to keep their credit card.  All they&#039;d have to do is issue out a pamphlet along with an updated agreement, and require people to sign up for an online pincode/password by such and such date in order to continue using their cards.  That gets everyone on-board, gives them the proper info they need to be armed with in order to avoid phishing, and does it in a way that feels legitimate and secure to those placing their trust and money into these companies.</description>
		<content:encoded><![CDATA[<p>Disgusting. Truly.  I&#8217;ve never seen a more offensive implementation of a security mechanism on an account.  I&#8217;ve been to a couple sites now that don&#8217;t even give an option to opt-out.   And I simply can&#8217;t bring myself to give in to the system and just hand over my info.  So instead, Discover got my money.  I can&#8217;t possibly see how this was deemed a better way to do this than a simple change to the cardholder&#8217;s agreement everyone has to abide by in order to keep their credit card.  All they&#8217;d have to do is issue out a pamphlet along with an updated agreement, and require people to sign up for an online pincode/password by such and such date in order to continue using their cards.  That gets everyone on-board, gives them the proper info they need to be armed with in order to avoid phishing, and does it in a way that feels legitimate and secure to those placing their trust and money into these companies.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Paul White</title>
		<link>http://www.richardskingdom.net/verified-by-visa-bad-for-security-worse-for-business/comment-page-2#comment-198</link>
		<dc:creator>Paul White</dc:creator>
		<pubDate>Tue, 23 Mar 2010 17:10:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.richardskingdom.net/?p=139#comment-198</guid>
		<description>Had no problem with Verified by Visa until the last two weeks when I have been unable to use elements of my password requested.

V by V say they have been having problems.  I have managed to withdraw my Debit card from the system, not tried Credit card yet but have requested same</description>
		<content:encoded><![CDATA[<p>Had no problem with Verified by Visa until the last two weeks when I have been unable to use elements of my password requested.</p>
<p>V by V say they have been having problems.  I have managed to withdraw my Debit card from the system, not tried Credit card yet but have requested same</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joshua Rodd</title>
		<link>http://www.richardskingdom.net/verified-by-visa-bad-for-security-worse-for-business/comment-page-1#comment-190</link>
		<dc:creator>Joshua Rodd</dc:creator>
		<pubDate>Mon, 22 Feb 2010 00:35:21 +0000</pubDate>
		<guid isPermaLink="false">http://www.richardskingdom.net/?p=139#comment-190</guid>
		<description>Chase Bank is one of the biggest banks in America. Do a quick Google search for &quot;Chase Verified by Visa&quot;. The link goes to an https site hosted under securesuite (dot) net, which just so happens to be a fraudulent fishing site.

To make matters worse, securesuite (dot) net used to be controlled by Chase, and used to be used by their Verified by Visa implementation.

You can see the old link for yourself on the demo.chase.com link on:
http://www.google.com/search?q=chase+verified+by+visa

This is all shockingly awful. It&#039;s kind of sad, too, to see that whoever controls securesuite (dot) net is using a VeriSign certificate to do so. You&#039;d think VeriSign might make sure it&#039;s not handing out SSL certificates to known criminals.

You also might think Chase would care to do a little more SEO policing of &quot;Chase Verified by Visa&quot;. I tried calling Visa about this and they refer all calls about Verified by Visa to Chase. I tried calling Chase, and they said Visa controls Verified by Visa, and that they can&#039;t do anything about it.

What really roils me, though, is that it&#039;s impossible to make purchases on some websites (such as Delta Airlines&#039; website) without going through the Verified by Visa charade.</description>
		<content:encoded><![CDATA[<p>Chase Bank is one of the biggest banks in America. Do a quick Google search for &#8220;Chase Verified by Visa&#8221;. The link goes to an https site hosted under securesuite (dot) net, which just so happens to be a fraudulent fishing site.</p>
<p>To make matters worse, securesuite (dot) net used to be controlled by Chase, and used to be used by their Verified by Visa implementation.</p>
<p>You can see the old link for yourself on the demo.chase.com link on:<br />
<a href="http://www.google.com/search?q=chase+verified+by+visa" rel="nofollow">http://www.google.com/search?q=chase+verified+by+visa</a></p>
<p>This is all shockingly awful. It&#8217;s kind of sad, too, to see that whoever controls securesuite (dot) net is using a VeriSign certificate to do so. You&#8217;d think VeriSign might make sure it&#8217;s not handing out SSL certificates to known criminals.</p>
<p>You also might think Chase would care to do a little more SEO policing of &#8220;Chase Verified by Visa&#8221;. I tried calling Visa about this and they refer all calls about Verified by Visa to Chase. I tried calling Chase, and they said Visa controls Verified by Visa, and that they can&#8217;t do anything about it.</p>
<p>What really roils me, though, is that it&#8217;s impossible to make purchases on some websites (such as Delta Airlines&#8217; website) without going through the Verified by Visa charade.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
<!-- WP Super Cache is installed but broken. The path to wp-cache-phase1.php in wp-content/advanced-cache.php must be fixed! -->