I wonder what they are concerned about? Watch this video. Security can’t be based on obscurity. You can be sure the hackers understand the vulnerability. Isn’t it the job of our Payment Card Industry standards member companies to include their rightful publication of all know security vulnerabilities? As hard as we work to meet their standards it concerns me that they might not be forthcoming in this. Anyone know more about this?