Tesco Clubcard. Paranoia strikes again.

Fella

fridge_raider wrote: »

I do question why Tesco, the multi-billion pound organisation, don't have someone as clever as you who can point this out to them?

Would your really? wow you have touching faith especially considering all the far bigger multi-billion pound organizations who've had their security compromised recently.

fridge_raider wrote: »

Is it that a real solution would be too costly, so it's better to implement what is essentially a PR exercise?

It's not a PR exercise, it's actually bad PR since it annoys customers whilst not fixing the problem.

fridge_raider wrote: »

All (as I say, I'm no expert on this kind of thing),

Some of us are, for a living.

Monkeyballs

The funny thing is that when the problem came to light a whole load of money would have been spent to investigate what happened (I.e. recreate it) understand options to stop it happening again and then look at the most cost effective solution.

All the while using "experts" to design and implement often without consideration for the user experience because this would be time consuming and drag it out...

Someone always knows better the company I work for recently started to use "Agile" project delivery as opposed to "waterfall" which is great in theory (or an improvement at least) 'cept "Agile" was mistaken to mean "quick, cheap and sloppy" LOL

MB

fridge_raider

Fella wrote: »

Would your really? wow you have touching faith especially considering all the far bigger multi-billion pound organizations who've had their security compromised recently.



It's not a PR exercise, it's actually bad PR since it annoys customers whilst not fixing the problem.



Some of us are, for a living.

I know, that's why I deferred to your statements. What I am questioning is, why do it then? Are you saying they are both doing it to annoy, whilst being in full knowledge that it does nothing to ramp up security? Or are you saying they are in ignorance of one or both of these points?

Fella

fridge_raider wrote: »

I know, that's why I deferred to your statements. What I am questioning is, why do it then? Are you saying they are both doing it to annoy, whilst being in full knowledge that it does nothing to ramp up security? Or are you saying they are in ignorance of one or both of these points?

No I don't think they do it to deliberately annoy customers. I think they do it because they don't really understand how to implement proper robust security (or want to spend the money it would take to do so because it wouldn't be cheap) so they prefer to take the much easier step of simply adding another layer of not particularly meaningful security.

To use a half-a$$ed analogy, their latest measure is akin to someone who has a plain not-that-wonderful lock on their front door, hearing about a series of break-ins in the area & then adding a second & not-even-as-good lock to the same door & calling it enhanced security. Even though technically they may have added an extra hurdle that an intruder would have to bypass, no-one would consider it a proper security measure. But it would be quick & cheap to implement.

Unfortunately for customers it results in the worst of all possible scenarios: Added hassle when logging on for no real security benefit anyway. And faux security measures are right up there with cheap parachutes when it comes to something you don't want to spend your money on.


As an amusing (Gallows humour) footnote, when I spoke to Tesco earlier today they already knew about the security breach & told me they'd written me a letter about it and that I should change my password immediately. Lemme repeat that: They knew about the security breach, they'd written me a LETTER, and I should change my password immediately

Cheers Tesco, every little helps.

Monkeyballs

Fella wrote: »

As an amusing (Gallows humour) footnote, when I spoke to Tesco earlier today they already knew about the security breach & told me they'd written me a letter about it and that I should change my password immediately. Lemme repeat that: They knew about the security breach, they'd written me a LETTER, and I should change my password immediately

LOL,

Dear Mr Fella,

I am pleased to inform you that we are aware of a recent security breach in which your personal details may have been made available to anyone who fancies them.

It is advisable that you change your password as soon as possible.

In addition, can you please confirm by return of post if this is still your current address? If not please let us know ASAP so we can amend our records and re-send this letter advising you to change your password.

Mr N E Fella
1 Derring How
Iziss Foreel
Massive Kent
MK1 4QU

MB