Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

How do I delete my cc information?

Warda Kawabata
Amityville Horror
Join date: 4 Nov 2005
Posts: 1,300
06-28-2006 01:34
LL is now committed to displaying whether or not they have payment information on you.

The servers have demonstrable insecurities, as evidenced by Torlay7s (and a small number of others') accounts being hacked last week.

Because whether or not they have payment information is now publicly accessible, this makes that minority group easy for hackers to target.

In view of this, I would like to know how I can delete LL's record of my credit card number on their servers. I don't mind keeping the premium account, but I'd rather it ask me for complete details each and every time I want to pay, instead of the server remembering such information.

Is this possible? Currently, it is a serious security risk.
Doubledown Tandino
ADULT on the Mainland!
Join date: 9 Mar 2006
Posts: 1,020
06-28-2006 01:43
I don't really know nothin about nothin.... but I'm guessing all your credit card info is probably secure and encripted, and is in some kind of setup not having anything to do with SL or secondlife.com (hopefully).....

Ebay has been hacked countless times, but I don't think anyone can get people's credit card info(s)
_____________________
http://djdoubledown.blogspot.com
Usagi Musashi
UM ™®
Join date: 24 Oct 2004
Posts: 6,083
06-28-2006 01:50
gesh you got to be joking! We been told countless time its safe not this! i can`t believe this crap! safe my bunny butt!
Tod69 Talamasca
The Human Tripod ;)
Join date: 20 Sep 2005
Posts: 4,107
06-28-2006 02:36
Well DUH!! It's the Internet!! There really is NO such thing as "private". It can all be had for someone who has the ability to get that information.

Safest method= dont use the internet! Period!
Wendel Gascoigne
Registered User
Join date: 19 May 2005
Posts: 226
06-28-2006 02:43
From: Warda Kawabata
Because whether or not they have payment information is now publicly accessible, this makes that minority group easy for hackers to target.


You know what? You are already a target. You registered in 2005, therefore I KNOW you provided CC information. Mwahahahahahahahahaha!!!!

Oh. Darn. I registered more than a year ago. so did I.

Erm... wait... Knowing that you or I provided CC info at registration does me no good whatsoever. LL labs does not display any payment info at all. This is NOT more risky than what's out there now.

Wendel
Toreddar Luchador
Registered User
Join date: 19 Jun 2004
Posts: 20
We are all going to be....
06-28-2006 03:00
dragged, kicking and screaming , into the realm of NO privacy and BB forcing us into work/sleep/shop/consume...it's the company's lot in life to guide us and nurture us to that point...and there's nothing to be done about it except to wait and watch it happen...no amount of screaming in this world will stop it ;)...the ONLY realm left to those of us used to freedom will be our minds....and they are working on THAT one, too.
Toreddar Luchador
Registered User
Join date: 19 Jun 2004
Posts: 20
and then.....
06-28-2006 03:07
the alarm clock went off *groans*....time for another day in the real world....hehe
Warda Kawabata
Amityville Horror
Join date: 4 Nov 2005
Posts: 1,300
06-28-2006 03:55
From: Wendel Gascoigne
You know what? You are already a target. You registered in 2005, therefore I KNOW you provided CC information. Mwahahahahahahahahaha!!!!

Oh. Darn. I registered more than a year ago. so did I.

Erm... wait... Knowing that you or I provided CC info at registration does me no good whatsoever. LL labs does not display any payment info at all. This is NOT more risky than what's out there now.

Wendel


Well sure, the normal non-hacked interface doesn't give such information. But given that teh data is on the server, and the server has already been hacked once, a determined hacker can presumably make the server release that information, regardless of what the standard server channels allow.

Really, since I don't intend on authorising more than 1 transaction a year, there really isn't any good reason for LL to be maintaining credit card details on that server.

There should be some option for a customer to force the server to purge the details of the credit card from the database.

If LL absolutely must keep that credit card data, the purge should remove it from normal access, block any further payments involving that card, and transfer any such credit card data to a physically isolated machine daily, purging it from the networked server after that daily transfer. That way they still have it (presumably for legal/tax /govt record keeping purposes), but it is physically impossible for someone not on the inside to get to the data.
Wendel Gascoigne
Registered User
Join date: 19 May 2005
Posts: 226
06-28-2006 04:28
It's more than likely a simple flag field associated to your account. It does not mean that your profile or other game functions are given access in ANY WAY your billing information. Purchase Lindens or enter a CC number at account creation and the flag gets set on the account.

It gives no info. No more access to your CC info than me knowing when you registered. No security risk. It sets a flag to one of 3 values.

Think of all the payments for tier, Lindens, ... processed by LL. Do you really think that's not already handled by a secure, isolated machine?

That being said, you might decide that you want to scale back to an unverified account. It's your prerogative as the new system supports this mode. I would ask that in the approrpiate section or customer services. There has to be a well defined way for customers who choose to do so to scale back their account.

No security risk and you have trusted LL this long with knowing your CC number. But it's your choice... or should be.

Wendel
SuezanneC Baskerville
Forums Rock!
Join date: 22 Dec 2003
Posts: 14,229
06-28-2006 05:10
From: Warda Kawabata
since I don't intend on authorising more than 1 transaction a year, there really isn't any good reason for LL to be maintaining credit card details

That's a reasonable point. If one pays the yearly $72.00 fee for a minimal premium account, once the transaction is complete there is no use for the information .

I don't supposed anyone has tried contacting billing and asking to have the information deleted, have they? Would the information actually get destroyed or would it just get moved to the deleted records file?
_____________________
-

So long to these forums, the vBulletin forums that used to be at forums.secondlife.com. I will miss them.

I can be found on the web by searching for "SuezanneC Baskerville", or go to

http://www.google.com/profiles/suezanne

-

http://lindenlab.tribe.net/ created on 11/19/03.

Members: Ben, Catherine, Colin, Cory, Dan, Doug, Jim, Philip, Phoenix, Richard,
Robin, and Ryan

-
Magnum Serpentine
Registered User
Join date: 20 Nov 2003
Posts: 1,811
06-28-2006 05:41
From: Doubledown Tandino
I don't really know nothin about nothin.... but I'm guessing all your credit card info is probably secure and encripted, and is in some kind of setup not having anything to do with SL or secondlife.com (hopefully).....

Ebay has been hacked countless times, but I don't think anyone can get people's credit card info(s)



Some sailors discovered their Secure and Encripted data on someones Web Page... There for the world to see was Credit Card numbers credit card secret numbers and Social Security Numbers.... Now the firm that handled the info may be sued for multiple millions of dollars or even Billions.
Wendel Gascoigne
Registered User
Join date: 19 May 2005
Posts: 226
06-28-2006 05:45
From: Magnum Serpentine
Some sailors discovered their Secure and Encripted data on someones Web Page... There for the world to see was Credit Card numbers credit card secret numbers and Social Security Numbers.... Now the firm that handled the info may be sued for multiple millions of dollars or even Billions.


Nice. So?

LL is NOT collecting more info than they used to have apart from a hashed number. They are not hacking into your computer. Give it a rest.

Wendel
Warda Kawabata
Amityville Horror
Join date: 4 Nov 2005
Posts: 1,300
06-28-2006 05:54
It's true the only additional information they're gathering now is a hash number derived from hardware. It's also true that, to my knowledge, that secure server had not been hacked before.

Just because I was complacent before, is that any reason to continue ignoring security issues now that I have been made aware of the risk?
Wendel Gascoigne
Registered User
Join date: 19 May 2005
Posts: 226
06-28-2006 06:09
From: Warda Kawabata
It's true the only additional information they're gathering now is a hash number derived from hardware. It's also true that, to my knowledge, that secure server had not been hacked before.

Just because I was complacent before, is that any reason to continue ignoring security issues now that I have been made aware of the risk?



Not at all! As I said before:

From: someone
That being said, you might decide that you want to scale back to an unverified account. It's your prerogative as the new system supports this mode. I would ask that in the approrpiate section or customer services. There has to be a well defined way for customers who choose to do so to scale back their account.


With the new system, you should certainly be able to scale back as well as up. I think that's a valid request.

Wendel
Warda Kawabata
Amityville Horror
Join date: 4 Nov 2005
Posts: 1,300
06-28-2006 06:16
Essentially the only way at present to remove my credit card details is to close my current identity (losing all non-transferable items and in-world reputation), and start again under a new name.

Or is there something you aren't telling me here?
Wendel Gascoigne
Registered User
Join date: 19 May 2005
Posts: 226
06-28-2006 06:31
From: Warda Kawabata
Essentially the only way at present to remove my credit card details is to close my current identity (losing all non-transferable items and in-world reputation), and start again under a new name.

Or is there something you aren't telling me here?


What I'm saying is that you should ask support, not the forum, to publish an official way of doing this without losing your identity. :)

It's a valid request.

Wendel
Annah Zamboni
Banannah Annah
Join date: 2 Jun 2004
Posts: 1,022
06-28-2006 07:02
I suggest getting one of those prepaid or VERY low credit line credit cards and change your account to use it. That way if you're hacked at very worse they can do is charge like 10 bucks or something.
Warda Kawabata
Amityville Horror
Join date: 4 Nov 2005
Posts: 1,300
06-28-2006 07:03
Prepaid credit cards, to the best of my knowledge, don't exist in either the country I am in or the country I come from, let alone any country I have visited in recent years.
Annah Zamboni
Banannah Annah
Join date: 2 Jun 2004
Posts: 1,022
06-28-2006 07:07
From: Warda Kawabata
Prepaid credit cards, to the best of my knowledge, don't exist in either the country I am in or the country I come from, let alone any country I have visited in recent years.

What about normal credit cards? Can you call your cc company and ask them to give you an additional credit card with a very small credit line?

Or just ask for a normal credit card, change SL to use that and then cancel that credit card once SL has been updated?
Warda Kawabata
Amityville Horror
Join date: 4 Nov 2005
Posts: 1,300
06-28-2006 07:20
From: Annah Zamboni
What about normal credit cards? Can you call your cc company and ask them to give you an additional credit card with a very small credit line?

Or just ask for a normal credit card, change SL to use that and then cancel that credit card once SL has been updated?


There's no way to respond usefully to that without revealing more of my banking life than I care to in public. I have contacted LL by email about this. It should be interesting to see what they have to say about this.
Annah Zamboni
Banannah Annah
Join date: 2 Jun 2004
Posts: 1,022
06-28-2006 07:23
From: Warda Kawabata
There's no way to respond usefully to that without revealing more of my banking life than I care to in public. I have contacted LL by email about this. It should be interesting to see what they have to say about this.

If push comes to shove and you are truely concerned about your credit card information, then create a new account with no cc info and cancel your current account. It may sound like a pain but whats more important, your financial well being or the last name of your avatar?

But yes I concur, it would be nice to just clear out your old cc history/info.
Warda Kawabata
Amityville Horror
Join date: 4 Nov 2005
Posts: 1,300
06-28-2006 15:58
I just got the official word.

Once you have paid, they either can not or will not remove the credit card information from the server. As long as whether or not our accont was paid for was kept confidential, I could live with that. But since that information is now public, and the server is known to be hackable, from now on, any time I make a payment to SL, I will be cancelling that credit card the next day.

I suggest that anyone who pays annually do the same.
Baba Yamamoto
baba@slinked.net
Join date: 26 May 2003
Posts: 1,024
06-28-2006 16:06
I does not take a notice in profiles for me to tell you who is paying or has paid in the past.


If you own land, you're a target because your CC info is on file.

If your account is older than free signups, you're a target beause there is CC info on file.

A year ago everyone had CC info on file.. Nobody seemed to consider it a breach of privacy, because if you were here it's because you had a credit card or some form of valid payment.

If they had given people with paid accounts special pink icons that said "I'M SPECIAL" and let them use rainbow text in their profiles.. People would say ;0 OH GEE PREMIUMS GET COOL STUFFS.. I WANNA SIGN UP FOR TEH RAINBOWS! And all the while they would ignore the fact that by giving everyone with payment details a pretty pink icon they made them targets!!!
_____________________
Open Metaverse Foundation - http://www.openmetaverse.org

Meerkat viewer - http://meerkatviewer.org
SuezanneC Baskerville
Forums Rock!
Join date: 22 Dec 2003
Posts: 14,229
06-28-2006 16:36
From: Warda Kawabata
Prepaid credit cards, to the best of my knowledge, don't exist in either the country I am in or the country I come from, let alone any country I have visited in recent years.


One can get Visa gift debit cards online that I think would work fine. I think you could get one for your avatar name with a made up address and it would work for an online purchase from LL, although this is just an assumption.

Can LL take any form of check or money order?
_____________________
-

So long to these forums, the vBulletin forums that used to be at forums.secondlife.com. I will miss them.

I can be found on the web by searching for "SuezanneC Baskerville", or go to

http://www.google.com/profiles/suezanne

-

http://lindenlab.tribe.net/ created on 11/19/03.

Members: Ben, Catherine, Colin, Cory, Dan, Doug, Jim, Philip, Phoenix, Richard,
Robin, and Ryan

-
Usagi Musashi
UM ™®
Join date: 24 Oct 2004
Posts: 6,083
06-28-2006 17:16
Warda, they have alot of ******* to say they will take down cc info after the breakin. But if it happens again and the worse happens LLabs will say. WE ARE SORRY and you all should review your account statements for POSSIBLE false additions to your cc statments from the hackers that walked in out server and took your info :cool: .......Pass the "YEN" they say don`t blame us blameyourself for using that cc...........If this is future reply from LLabs I see to reason to trust CC with them. This is a joke!
1 2 3