Hello Stanislav,

On Mon, 2007-10-15 at 12:54 +0200, Stanislav Meduna wrote:
> Bill Maas wrote:
> 
> > The problem is that I don't like having my credit card nos. all over the
> > place, so I asked Wim Vandeputte from soekris.kd85.com
> ..
> > A company named Escrow.com (www.escrow.com)
> 
> And why exactly do you trust Escrow.com more than Wim Vandeputte?

I'd trust my private data to be with a single organization more than Wim
Vandeputte and a 1000 other sellers. It has noting to do with Wim
personally, I hope that's clear;).

> You are probably not USA-based if you buy from Wim - good luck
> to dispute something if they screw up...

Would not need any luck if an escrow were used..

> > The key issue is trust, the financial side should be much less
> > of a problem (basically all that is required is a computer
> > and a bank account).
> 
> Yes, the key issue is trust. So how exactly can an "open
> source community" help here?

OK, it's maybe a weird idea. The point being that I'd trust a bunch of,
say, OpenBSD diehards at least as much than the average bank when it
comes to security issues. And I'd trust an organization backed by
FreeBSD, OpenBSD, GNU et al at least as much as some financial
institution I've never heard of before. And it could be non-profit.

But that's more of an ideological story, so let's just forget about that
one. I just didn't want to promote Escrow.com, yet at the same time
state that Soekris Engineering should really use [something like] it
[and not Paypal for reasons explained].

And I see no reason why I should trust any seller with my CC nos., no
matter what they should or should not do, how strong or weak SSL
encryption is etc. In my view it's just plain nonsense having to send
such data over the wires over and over again.

Still looking forward to my net5501;)

Bill

> 
> > And I still feel that any host any of my my CC-nos. sits on is one too
> > many (they're not even on any of my computers).
> 
> If they do not store CVV (and nobody should do this), you as
> a buyer are pretty safe. A CC transaction with neither
> a signature nor CVV is basically a seller's risk, so if
> they do get hacked, you'll have no problems to get
> the money back.
> 
> You can also order by fax (giving the seller a signature,
> but not the CVV). Or pay by transfer in advance limiting
> your possible loss to that one transaction.
> 

_______________________________________________
Soekris-tech mailing list
[email protected]
http://lists.soekris.com/mailman/listinfo/soekris-tech

Reply via email to