On: Security incident update

[chris_wot]

"Along with the encrypted credit card, the last four digits are stored in clear text to assist in lookups and for display on things like your Account tab and payment receipt emails."

I really don't see the need for that at all. What sort of credit card "lookup" are they doing exactly?

[lucaspiller → chris_wot]

I guess it's mainly to display stuff. When you have multiple cards on Amazon you can choose which one to use, however without seeing the last four digits its pretty hard to tell which is which.

[mekoka → chris_wot]

It's not for them, it's for users. It helps to know which of your CCs is going to be charged.

[UnoriginalGuy → chris_wot]

It is fairly standard. Go look at your Amazon account, you'll see the last four digits.