3
votes
2answers
242 views

How can I report an ecommerce site in violation of security practices?

I ordered a product from a website and found that their invoice display page is completely un-protected with the order id in the query string and merely incrementing the number exposes every order. ...
13
votes
3answers
813 views

Whistleblowing, business ethics and credit card data

I'm writing this post as I'm facing a personal, ethical dillemma and I would like feedback on the best way to approach this situation, particularly from a philosophical point of view. I work for a ...
8
votes
2answers
1k views

Is there a way for a consumer to report PCI non compliance?

Is there a way for a consumer to report PCI non compliance?