VbV has to be some of the worst security engineering I've ever seen. iframe cont...

		shabble on Oct 6, 2011 \| parent \| context \| favorite \| on: 0day vulnerability full disclosure: American Expre... VbV has to be some of the worst security engineering I've ever seen. iframe content, arbitrary domain (securesuite?!), trivially guessable or resettable details.

And to add on top it looks like a con, the design is horrific.