OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help



   RE: [xml-dev] Paypal

[ Lists Home | Date Index | Thread Index ]

Why don't you, Len and the rest take it to comp.risks? I like offtopic threads as much as everyone else but DANG this is getting a bit much. 


From: Rich Salz [mailto:rsalz@datapower.com]
Sent: Thu 8/14/2003 11:24 AM
To: Elliotte Rusty Harold
Cc: Bullard, Claude L (Len); 'Simon St.Laurent'; xml-dev@lists.xml.org
Subject: [xml-dev] Paypal

I know it's off-topic, but I think folks on this list like knowing
this kind of thing.

Paypal originally worked (maybe still does) by "crediting" your
CCard account.  That's in strict violation of how the credit cards
are supposed to work.  When a former colleague (our common employer
is now gone) asked Visa and MC their opinion about this, they said
"we know, we're letting it happen because we're curious what's
gonna happen."

So Paypal's exposure was even greater, and from the very beginning.
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
XML Security Overview      http://www.datapower.com/xmldev/xmlsecurity.html

The xml-dev list is sponsored by XML.org <http://www.xml.org>, an
initiative of OASIS <http://www.oasis-open.org>

The list archives are at http://lists.xml.org/archives/xml-dev/

To subscribe or unsubscribe from this list use the subscription
manager: <http://lists.xml.org/ob/adm.pl>


News | XML in Industry | Calendar | XML Registry
Marketplace | Resources | MyXML.org | Sponsors | Privacy Statement

Copyright 2001 XML.org. This site is hosted by OASIS