Comment on Mozilla review of 25 car brands finds they're "a privacy nightmare"

• gravitas_deficiency@sh.itjust.works ⁨1⁩ ⁨year⁩ ago

  The fact that you think it’s reasonable for literally anyone but you to give out your credit card details is a pretty big sign my guy

  source

  • brygphilomena@lemmy.world ⁨1⁩ ⁨year⁩ ago

    Because banks don’t give out credit card details.

    You created an authorization code which is independent from the credit card details. The authorization code doesn’t get revoked automatically when a card expires or a new card issues.

    source

    • gravitas_deficiency@sh.itjust.works ⁨1⁩ ⁨year⁩ ago

      Jesus tap dancing christ. I understand the difference between CC + CCV + expiry date and an oauth token (or whatever protocol they’re using for identification and authentication). I’m saying that not expiring auth codes when new cards are issued is a security and privacy issue. Users should ideally be given a switch to opt in to behavior like that. It should not be the default.

      source