[ale] GaTech security breach SANS announcement

[Transam]

On Tue, Apr 15, 2003 at 04:40:28PM -0400, Dow Hurst wrote:
> That is amazing!  So the bank wants to wait for the fraud to occur 
> before taking action.  I know it costs money to switch cards and account 
> numbers, but I wonder what the banks insurance company thinks about that 
> policy?  The whole credit card fraud deal is really a difficult problem 
> since it impacts people's lives in such a negative way.  I would really 
> want a new number and so not take that risk.  Thanks for that info,

The bank's cost to re-issue a card is a $0.37 stamp.  I suspect that
it's more due to a combination of stupidity and the prospect of
sticking the customer with some of the fraud.

If you have reason to believe that your credit card has been compromised,
explain that they can either issue you a new account or accept an
immediate cancellation and get one from someone else.

Dealing with CC fraud is a major pain in the bleep.  I speak from
experience.

If there's any chance that your Debit (instead of credit) card that
has been compromised, DRIVE IMMEDIATELY TO YOUR BANK AND CLOSE YOUR
ACCOUNT AND GET WRITTEN ACKNOWLEDGEMENT.  DO NOT TAKE NO FOR AN ANSWER.
(IF IT IS AFTER HOURS USE the 24 hour number and visit them at 9:00 am.)

> Dow

Bob Toxen
bob at verysecurelinux.com               [Please use for email to me]
http://www.verysecurelinux.com        [Network&Linux/Unix security consulting]
http://www.realworldlinuxsecurity.com [My book:"Real World Linux Security 2/e"]
Quality Linux & UNIX security and SysAdmin & software consulting since 1990.

"Microsoft: Unsafe at any clock speed!"
   -- Bob Toxen 10/03/2002


> Jim Popovitch wrote:

> >>-----Original Message-----
> >>From: Dow Hurst
> >>Sent: Monday, April 14, 2003 3:12 PM
> >>
> >>Anyone local here in Atlanta that bought tickets might want to get
> >>their account number changed.  This post is a bit old since this
> >>happened a couple of weeks ago.
> >>   
> >>
> >
> >I know someone who was involved with this.  He was contacted by GaTech via 
> >email
> >and advised to contact his Visa card bank.  The bank said not to worry 
> >about it
> >as they (the bank) would be able to tell if and when the card was used
> >fraudulently.  He asked for a new card and account number and they said 
> >no, not
> >without proof of actual fraud.   I suspect that it is costing card issuers 
> >too
> >much money these days to keep reissuing credit cards for every suspected 
> >fraud.
> >
> >-Jim P.
> >
> >_______________________________________________
> >Ale mailing list
> >Ale at ale.org
> >http://www.ale.org/mailman/listinfo/ale
> >
> > 
> >

> -- 
> __________________________________________________________
> Dow Hurst                  Office: 770-499-3428
> Systems Support Specialist    Fax: 770-423-6744
> 1000 Chastain Rd. Bldg. 12
> Chemistry Department SC428  Email:   dhurst at kennesaw.edu
> Kennesaw State University         Dow.Hurst at mindspring.com
> Kennesaw, GA 30144
> *****************************************************************
> This message (including any attachments) contains confidential  *
> information intended for a specific individual and purpose,     *
> and is protected by law.  If you are not the intended recipient,*
> you should delete this message and are hereby notified that     *
> any disclosure, copying, or distribution of this message, or    *
> the taking of any action based on it, is strictly prohibited.   *
> *****************************************************************


> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale