Welcome to NBlog, the NoticeBored blog

I may meander but I'm 'exploring', not lost

Jan 9, 2007

Credit card data sent over AOL IM link

Here's a curiously amusing tale about a shop using AOL Instant Messenger to send a customer's credit card details, unencrypted, to another shop where the EFTPOS terminal was. The shop assistant had a slight clue about credit card security: on the hand-written receipt, he used X's in place of most of the credit card number!

We use little scenarios like this (and some not so little) in our case studies and other security awareness materials ...

More identity theft and security awareness links