website taking cc details on unsecure page

earthstorm

corbyboy wrote: »

I am not saying you are wrong, but why is this the case? In what way would that be insecure?

when a page is insecure, if your site gets hacked and a keylogger or other malware/trojan is installed then anything written on an insecure page can be read and stolen and then used for ID theft

Name
Address
email
DOB
tel: number

can you image what a criminal can do with this information

but if you have a SSL certificate installed on your site then any page that a customer enters any details will be encrypted. you could even have your whole site to run under the SSL cert (https)

LittleVoice

earthstorm wrote: »

Name
Address
email
DOB
tel: number

can you image what a criminal can do with this information

What can you imagine?

earthstorm

LittleVoice wrote: »

What can you imagine?

Are you taking the mick

with them details they can get credit in your name, get many credit cards, max them out and you will be the one chased with debt collectors

do i need to go on

Money-Saving-King

earthstorm wrote: »

Are you taking the mick

with them details they can get credit in your name, get many credit cards, max them out and you will be the one chased with debt collectors

do i need to go on

But if someone were to take out a credit card in your name it would be sent to your home address so you'd find it anyway?

terra_ferma

They take full cc details, including security code.
Is there someone they can be reported to (a part from going down the Data Protection route)?
(sorry not going to publish details of a vulnerable site on an open forum).

terra_ferma

Money-Saving-King wrote: »

But if someone were to take out a credit card in your name it would be sent to your home address so you'd find it anyway?

I know people this has happened to, and the cards were sent to a different address.

earthstorm

Money-Saving-King wrote: »

But if someone were to take out a credit card in your name it would be sent to your home address so you'd find it anyway?

This is a common thing that happens, which if you keep abreast of consumers programs you would be aware of this.

this also happens

they have your details and go to mobile phone shop, sign up for lets say a £50 a month contract in your name using your address/DOB and card details, they take phone away and wrack up £1000 charges, well

who do you think gets this bill.?

earthstorm

terra_ferma wrote: »

They take full cc details, including security code.
Is there someone they can be reported to (a part from going down the Data Protection route)?
(sorry not going to publish details of a vulnerable site on an open forum).

you could mention this to their host or ISP. You could PM me the site details as 11+ years in hosting business i know what to look for.

OlliesDad

Money-Saving-King wrote: »

But if someone were to take out a credit card in your name it would be sent to your home address so you'd find it anyway?

Not necessarily.. if on the application they put a different address (a property that is empty but can be accessed), but put the address entered as a previous address.. the chances of gaining credit are slimmer but some banks will still put it through.

earthstorm

OlliesDad wrote: »

Not necessarily.. if on the application they put a different address (a property that is empty but can be accessed), but put the address entered as a previous address.. the chances of gaining credit are slimmer but some banks will still put it through.

exactly, this is why these forms will ask for previous address if within the last 3 years, so they could do credit checks, but with cards like Luma now where you can get up to £1,500 credit approved within minutes and when they max it out you will be chased for the money