[17568] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: Some companies are just asking for it.

daemon@ATHENA.MIT.EDU (Perry E. Metzger)
Fri Jun 24 14:36:54 2005

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
To: cryptography@metzdowd.com
From: "Perry E. Metzger" <perry@piermont.com>
Date: Fri, 24 Jun 2005 14:28:13 -0400
In-Reply-To: <87mzpgzd97.fsf@snark.piermont.com> (Perry E. Metzger's message
 of "Thu, 23 Jun 2005 22:42:44 -0400")


"Perry E. Metzger" <perry@piermont.com> writes:
> Oh, and what companies are involved? The card is Fidelity branded, but
> it is really an MBNA production, with online marketing and card
> servicing (like this piece) being done by Individualized BankCard
> Services. One would think that everyone in question would know better,
> but sadly they don't.

I got a very nice communication from a person at Fidelity Investments
wanting to make sure that this was from the (unrelated) Fidelity Bank,
and not something that they had done. It is indeed a Fidelity *Bank*
branded credit card, not a Fidelity *Investments* card. The two
organizations are entirely unrelated and just happen to share a name.

For the record, the guys at Fidelity Investments have always seemed to
me to have their act together on security, unlike lots of other
places. They have excellent FAQs for their users on what is and what
is not safe to do in a web browser, they only allow logins from pages
that are downloaded with SSL, etc. The fact that someone there was
worried when I sent out my mail and got in touch with me to check
only confirms for me the feeling that they seem to try hard to do
their jobs right...


Perry

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post