Quote:
Originally Posted by AnemicOak
|
If it's just a user name and an order number (and they
aren't storing the associated CC#s
forever in their store database), then that is fine with me -- it's basically a personalized copy with no personal security risk.
Still, that's a far cry from the claims that it will let them track down who distributed the book -- you'd need verifiable personal data stored for that. Either in the book file itself or in an eternal database. I'll hope that their anti-piracy claims are, well, naively based on the assumption that one's Pottermore username will be one's ACTUAL name.
For instance, I'll bet "Anemic Oak" isn't your real name.
Quote:
Originally Posted by charleski
Explain to me how giving your name, address and CC# to Kobo is different.  |
1. Most companies don't store customer CC# information indefinitely because they aren't intending to use it to track you down years and years from now if the copy you bought gets pirated. After an X period of time, your CC# is usually purged from the data banks unless the user has specifically asked them to remember the card.
2. Those that do have to follow strict legal requirements for firewalls and regular checks IF they're a large company in danger of being audited. Smaller companies tend to skate under the radar and frequently don't perform rigorous checks. I doubt that Pottermore is going to have the years of experience necessary to know how to implement all this OPSEC out of the gate.
3. Pottermore is partnered with SONY. They've just had a security breach
nightmare with their PSN, so I'm not in the mood to repeat that.
4. You're conflating my points. My concern is that Pottermore will either embed the CC# in the book file, in which case losing my reader would be a problem, yes. My other concern is that they will keep my CC# in a database forever, which presents hacking concerns of a different variety.
To my knowledge, Kobo does
neither of these things.
But as I say, if it's just the user name being embedded and the CC# isn't kept on hand forever in a database, then I'll buy them under a random user name and that's fine. But that would make their anti-piracy claims pretty silly, so... there's that.