<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: arial,helvetica,sans-serif; font-size: 12pt; color: #000000'><font face="arial, helvetica, sans-serif" size="3">Presumably when they say credit card numbers, they mean payment info, including debit and ACH numbers, and associated data like billing zip, etc. </font><div><font face="arial, helvetica, sans-serif" size="3"><br></font></div><div><font face="arial, helvetica, sans-serif" size="3">One of my credit card companies used to have a great service where you could go on their site and generate a special credit card number for use with online transactions. You could limit the total value allowed on the number and set an expiration date any time up to your real card's expiration date. Only transactions from the first vendor to use it could ever use it. So if you generated it for, say, Linode and they immediately made a charge (as they would tend to), no one who later got that credit card number could use it to buy something on Amazon. You could also cancel the individual special use number without affecting your whole card and that whole </font><font face="arial, helvetica, sans-serif">rigmarole</font><font face="arial, helvetica, sans-serif" size="3"> of cancelling your credit card, being sent a new card, and updating all the places where you had recurring charges. </font></div><div><font face="arial, helvetica, sans-serif" size="3"><br></font></div><div><font face="arial, helvetica, sans-serif" size="3">It seemed like a great system and I don't know why they quit it, unless it was a victim of it's own success--perhaps they were using up their cc number address space too fast. Then again, that bank may have just been bought by some other one who didn't have the systems in place to offer that service. Does anyone know of a credit card company that does offer such a service these days?</font></div><div><font face="arial, helvetica, sans-serif"><br></font></div><div><font face="arial, helvetica, sans-serif">Scott<br></font><br><hr id="zwchr" style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt;"><div style="color: rgb(0, 0, 0); font-family: Helvetica, Arial, sans-serif; font-size: 12pt; font-weight: normal; font-style: normal; text-decoration: none;"><b>From: </b>"leam hall" <leamhall@gmail.com><br><b>To: </b>"Atlanta Linux Enthusiasts" <ale@ale.org><br><b>Sent: </b>Tuesday, April 16, 2013 10:53:59 AM<br><b>Subject: </b>Re: [ale] Linode hacked, CCs and passwords leaked<br><br><div dir="ltr">One more reason I'm glad we don't have credit cards.<br><br><br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Apr 16, 2013 at 10:40 AM, Chuck Peters <span dir="ltr"><<a href="mailto:cp@axs.org" target="_blank">cp@axs.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><br></div><div><a href="http://blog.linode.com/2013/04/16/security-incident-update/" target="_blank">http://blog.linode.com/2013/04/16/security-incident-update/</a> says:</div>
Credit card numbers... The private key is itself encrypted with passphrase encryption and the complex passphrase is not stored electronically. ... We have no evidence decrypted credit card numbers were obtained.<br>
<div><br></div><div>Do the crackers have the public and private keys?</div><div> </div><div>And if that /. link to irc stuff is right, they have the public and private keys. So how long will it takes to brute force a passphrase. Not long I assume...</div>
<span class="HOEnZb"><font color="#888888">
<div><br></div><div><br></div><div><br></div><div>Chuck</div>
</font></span><br>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div><a href="http://leamhall.blogspot.com/" target="_blank">Mind on a Mission</a></div>
</div>
<br>_______________________________________________<br>Ale mailing list<br>Ale@ale.org<br>http://mail.ale.org/mailman/listinfo/ale<br>See JOBS, ANNOUNCE and SCHOOLS lists at<br>http://mail.ale.org/mailman/listinfo<br></div><br></div></div></body></html>