Bruce Schneier with some thoughts and possible demands regarding the recent security debacle at a large American credit card authorizer. Apparently, the data should not have been on their system at all - due to the high demands that credit card companies (at least in the documents) place on authorizers, Card Systems should actually be out with Mastercard and Visacard.