Verified by Visa - its shit.
Discussion
I suppose the title largely covers it, but...
How much security do I really need? I have a debit card for my current account, and a credit card both from the same company. Concievably this means I could get by with say 1 user id, 1 password, and maybe a secret question.
In actuality I have 2 membership numbers, 2 'security codes', 3 passwords and a pinsentry card reader. This makes it a total pita to remember them all, but the one that really pisses me off is the verified by visa side of things.
You complete your transaction on a website, then suddenly you get taken to some other side where its asking you for bank details in addition to those that were provided to the main website! Its in a wonderfully amateurish looking bit of html to add to that 'dont trust this' feeling (I know, dont judge by the appearance but it does add to the alarm bells). Then 9 times out of 10 it tells you your password was wrong (it wasnt) and throws the f
king transaction out the window!
I thought hmm, maybe this time I really did put it in wrong, so I changed my password (yay, another one to remember) and tried again... nope, its just fking broken and is throwing up a message blaming me for it. ing fks.
Now if youll excuse me, im going to go set up a scam website offering some great deal and then putting a fake verified by visa window at the end of it that'll tell people they got their password wrong and they need to confirm it with other details, this time next week i'll be a zillionaire with my scammed funds.
How much security do I really need? I have a debit card for my current account, and a credit card both from the same company. Concievably this means I could get by with say 1 user id, 1 password, and maybe a secret question.
In actuality I have 2 membership numbers, 2 'security codes', 3 passwords and a pinsentry card reader. This makes it a total pita to remember them all, but the one that really pisses me off is the verified by visa side of things.
You complete your transaction on a website, then suddenly you get taken to some other side where its asking you for bank details in addition to those that were provided to the main website! Its in a wonderfully amateurish looking bit of html to add to that 'dont trust this' feeling (I know, dont judge by the appearance but it does add to the alarm bells). Then 9 times out of 10 it tells you your password was wrong (it wasnt) and throws the f
king transaction out the window! I thought hmm, maybe this time I really did put it in wrong, so I changed my password (yay, another one to remember) and tried again... nope, its just f
king broken and is throwing up a message blaming me for it. ing fks.Now if youll excuse me, im going to go set up a scam website offering some great deal and then putting a fake verified by visa window at the end of it that'll tell people they got their password wrong and they need to confirm it with other details, this time next week i'll be a zillionaire with my scammed funds.
shouldbworking said:
Then 9 times out of 10 it tells you your password was wrong (it wasnt) and throws the fking transaction out the window!
+1king transaction out the window! Have the same problem with my NatWest 'online security' b
ks. 
Why can't it have the same details as my online banking login?
Let's face it, if someone's hacked my credit card details it's not going to be beyond them to do the same for my online banking...
We have had to write this ecommerce stuff and its a pita.
Problem is we cannot host the code that does the VBV (for obvious reasons). We just have to create a little window or popup etc into which their site loads. From this point we dont know what is happening. Their bit finishes then its a case of then checking with them in the background whether the transaction was ok or not. Bit long winded.
Problem is we cannot host the code that does the VBV (for obvious reasons). We just have to create a little window or popup etc into which their site loads. From this point we dont know what is happening. Their bit finishes then its a case of then checking with them in the background whether the transaction was ok or not. Bit long winded.
shouldbworking said:
Anyone know any banks that dont enforce this 'service'? vote with your feet and all that
I doubt it...With CC fraud becoming more prevalent, if anything it'll only get worse!
ETA How did you not get a censored title?
Edited by LukeBird on Monday 17th November 14:33
Gassing Station | The Pie & Piston Archive | Top of Page | What's New | My Stuff