verified by visa WTF ?

[Warby]

so i bought something a while ago on play.com ( civ5 if i remember correctly) and when paying it requested i create verified by visa (vbv) account with password.

i read a little about it and complied.

issue was i used to have a very simple password scheme back then if one of my passwords gets compromised they kind of all are ... or at least anyone with a tiny bit of brain will be able to figure out all my passwords.

than the whole lulsec thing happend and actually some people i know got some accounts and passwords compromised. freshly scared i set out to go through ALL my internet accounts/passwords and TOUGHEN them the fuck UP ! (alpha numeric capitalization and so on)

this took quite a while and the only thing that i can still remember being on the old scheme is the fucking verified by visa password !

because you cant change the password on the visa page and you cant change it on my banks page either.

i read online that you can only do it in the web interface /prompt of a merchant ... like play.com but it seems play.com stores everything about my card info including those passwords (totally making the extra step of security pointless) so when i buy something the vbv windows appears for one split second and without me having to type in my password this shit just jumps straight to the "THANK YOU FOR YOUR ORDER" page.

i mailed play.com asked what i can do to force the window to stay open they just send me a mail back giving me a copy paste marketing pitch about how secure vbv is and not at all answering my question.

after a bit more pushing they essential said we cant be bothered to deal with this go talk to you bank ... who of course in turn say: they cant change the password either and i should talk with the merchant.

next thing i tried was purposefully fucking up my credit card info that play.com has stored in the hope that the vbv window would prompt me and say: "dude shits not right here ... fix it !" but it just waived my purchases through no problem and than a couple of days later ( after i canceled my order just to be sure) play.com suspended my account.

anyone else got harrased by vbv ? and do you know another merchant where i could make a purchase to get to that fucking web interface ?

[Thrik]

My bank's online thing lets you change this, but if not just about every online shop I use asks for my Verified by VISA password — I think it's compulsory with UK sites. Examples off the top of my head are Amazon and eBuyer. :derp:

[Warby]

i tried amazon but didnt get it ... ebuyer ey .... ill try that

[Skjalg]

have you tried using another machine other than your own to purchase anything? My guess is that the vbv thing is stored somewhere locally on your machine and it uses that locally cached thing when you see it for a brief second.

But if you switch computer, it cant grab that info from anywhere.