Last Straw

Ryan Paul writ­ing for Ars Tech­nica:

When mak­ing a pur­chase, online shop­pers are con­fron­ted with a val­id­a­tion check that requires them to sup­ply a pass­word — in addi­tion to the stand­ard secur­ity code that is on the card itself — in order to prove that they are the real owner of a credit card. … Some of the credit card com­pan­ies take advant­age of [this sys­tem] by wrap­ping their imple­ment­a­tions of the val­id­a­tion sys­tem in dra­conian terms of ser­vice that force users to agree to accept full liab­il­ity for credit card fraud.