Do we need e-commerce preschools?

[lilfluff]

You know how in preschool you would get the lesson, "After going potty you need to wash your hands," that your parents first taught you reinforced?

Do we perhaps need an e-commerce preschool in which people can be taught, "After getting a credit card number, make sure you aren't saving it clear-text on a public facing server." And should we not consider companies that make this mistake to still be e-commerce toddlers? Possibly quite cute, but not yet ready to be given serious responsibilities.

Similar lessons being, "Don't store their password, store a hash of the password," and "Use SSL on those login pages, it's good for you."

Comments

[databank.livejournal.com]

This related to the current PSN fiasco? I honestly groaned a little when I read "password" in the list of things that may have been compromised.

[lilfluff.livejournal.com]

Inspired by, but not soley due to the PSN fiasco. It feels like this has been just yet another case of plaintext passwords and credit card numbers.

[databank.livejournal.com]

You honestly probably don't want to know how many CPU cycles Lucidia uses (and the MZDM AMS used to) on hashing a password. Naturally, I don't have to worry about credit card numbers there.

On my PSN account, on the other hand... well, I'm glad I check that card's info weekly. I may contact my bank to have it re-issued just in case.

It also cracks me up how some people are talking about how people should switch to the xBox because of this. I'm not sure I'd exactly trust Microsoft's track record on security over Sony's. >.>