questionsis the ccv no longer required for woot purchases?

vote-for17vote-against
vote-for5vote-against

buying something still requires a human, at least 2 buttons clicked on 2 seperate pages. i dont think you will accidentally buy something

vote-for5vote-against

@drsilentg: I guess you're right. Using the auto-buy feature in Wootalyzer or other woot tracking sites would open the final confirmation page. Today's example: https://wantone.woot.com/?item=e92deb6f-6374-4ff3-b083-b1f1db6157af
Assuming you're already logged in, all you would have to do is click the "place your order" button. If I don't have to type anything before ordering, accidentally clicking a button would be pretty easy to do. Especially if I'm looking at woot on my phone or other touch screen device. It still seems like it would make it easier for bots to win BOCs. All they have to do is automatically click the "place your order" button after the page loads.

vote-for4vote-against

@jumbowoot: can you forward this to the right person for an answer please?

this worries me because of the stolen identity issues.

vote-for4vote-against

@moosezilla: I haven't tried to add a new shipping address. Maybe, like Amazon, it requires you to enter the card info again if you're shipping to a new address. I'll bet it requires the CCV when you add a new card, but I haven't tried that either.

vote-for4vote-against

@bsmith1: Woot did make it easier to cancel orders, so I'm guessing they don't want to handle the number of cancels.

If it makes you feel any better, whenever I try to purchase something I am forced to login again. Even clicking on the buy button from Wootalyzer, I am still forced to login. Not sure if this makes you feel any safer, but at least it is something.

vote-for5vote-against

While I haven't had a chance to test this, my guess is the CCV is still required for new cards, new addresses, etc.

Woot is hardly the first site to not require the CCV. For example, their now-parent company Amazon has not required one for awhile. My guess is Woot is just following their lead.... in fact the current system bears a close resemblance to Amazon's "1-click ordering" system. Though people should be allowed to opt out of that if they choose to, as they can on Amazon.

vote-for5vote-against

Oh frack. It would appear that the CCV code is no longer required. Which means that anybody at work can buy anything on my account when logged in. I'm going to have to change my password from the low security one it had to a high security one when I get home.

Thanks for the heads up.

vote-for2vote-against

@novastarj: True about Amazon. I have my Amazon account set to prompt me for my password again to complete the check-out process. This doesn't happen to me on woot as someone else mentioned. I didn't see any new settings for this under my woot account page.

@wilfbrim: Very true! I lock my computer at work while I'm away, so that won't be an issue for me. On the plus side, if the wootalyzer alarm goes off for the BOC, anyone passing your desk could click the buy button for you and they wouldn't need to know your CCV #.

vote-for2vote-against

@novastarj: Hmmmmm......I buy from Amazon a lot, and as recently as last night. It still asks for me to enter my ccv in order to complete my purchase there. I disabled one-click ordering there on purpose, however. Don't know about Woot, but based on one of the question/answer "quizzes" on the temporary pages while it was down, that's the impression I got -- that Woot would be adding a one-click purchase option.

vote-for2vote-against

Just so you know...

Most credit card processors require AVS/CVV2 checks on your first transaction only now.

The more you know...

::STARWIPE::