Skip to content

Comment on American Express fails miserably at basic security

Comments

Why would you even need the entire credit card number to sign up for a service likes this? That's what boggles my mind the most. Amex really only need enough data to identify one of their cardholderes in such a way that noone can sign up for someone else.

Name + billing address + four last digits should be enough? Or eight last. Or four last + CVC. Asking for everything that's required for a purchase is beyond dumb. To me, it's like giving out your password while talking to customer representatives, that's also something you don't do.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.