[SBE] SBE Digest, Vol 204, Issue 1

[Jim Bernier]

Members addys are no more exposed by offering a PayPal option on the website than by offering the current VISA/MC/AMEX options.


  ----- Original Message ----- 
  From: dynotherm at earthlink.net 
  To: sbe member discussion mail list 
  Sent: Thursday, July 23, 2009 1:45 PM
  Subject: Re: [SBE] SBE Digest, Vol 204, Issue 1


  I don't believe a public forum is the proper place for a security discussion,
  but I will say that I believe that adding PayPal as a payment option will
  subject members whose e-mail addresses are harvested from the "wild"
  (eg. HERE and other places) to a particular sort of phishing spam well
  known to Ebay users - and I'll leave it at that, except to suggest that the 
  Board carefully consider the potential liabilities of having facilitated same.

  It matters not if a member has used PayPal, only that National OFFERS
  it and members addys are exposed. If those conditions are met, the
  phishing spam will follow.

  Phil Alexander, CSRE, AMD
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://seven.pairlist.net/pipermail/sbe/attachments/20090723/7a02e8af/attachment.html>