Evan Schuman's StorefrontBacktalk

And what does Amazon say? "A merchant can obtain certification without a physical walkthrough of a service provider's data center if the service provider is a Level 1 validated service provider (such as AWS). A merchant's QSA can rely on the work performed by our QSA, which included an extensive review of the physical security of our data centers." Yeah, this isn't going to be pretty.Read more...

Although the original 34,000 First Phone devices (which will still be used in stores) can be hooked up to a portable printer to serve as mobile POS, the 25,000 new stripped-down First Phone Junior units will do price scans and inventory checks but not POS, under the theory that it's not a feature most associates need.Read more...

The chain, Wyndham Hotels, is also accused of other supremely naughty security procedures, including storing full payment-card data in clear text, not having proper network segmentation and deploying classically bad password policies. "For example, to allow remote access to a hotel’s property management system, which was developed by software developer Micros Systems Inc., Defendants used 'micros' as both the user ID and the password," said the FTC's federal filing.Read more...

Not only can online retailers charge different prices to different consumers, they may also be able to prevent one consumer from telling others how much they were charged. First off, is this approach likely? asks Legal Columnist Mark Rasch. Answer: Yes, because it's the next logical step.Read more...

Drilling into the details of the plan raises questions about how different the site will truly feel, and that speaks to how the data is used and to how aggressive the customization is. For example, the more decisions are made—or, more precisely, perceived by customers to be made—about spend levels and then displaying higher-priced items, the more resistance might be encountered.Read more...

The good news: no Google-style POS changes required, at least not to meet Microsoft specs. The bad news: no help from Microsoft, either. Unless you build your own in-store shopping app, the Microsoft Wallet will basically do contactless card emulation—and not much more.Read more...

The chain last week announced enhancements such as deeper access to purchase history and promotions—which themselves telegraph specific types of drugs being prescribed. For authentication, the site is seeking the usual password and login for access. But it then requires a birthdate and—here's the good part—two pieces of information likely found only on an existing prescription bottle: a prescription number and the store number.Read more...

Here's how that magic works: A couple of MPOS-armed associates approach some of the overflowing lines and announce that if anyone has a payment card and would like to be checked out with a mobile device to please say so.Read more...

When automated, do such tools facilitate good interactions and help customers encourage each other's purchases (such as saying whether an outfit looks sharp with those shoes or if that drillbit is the proper one for a particular fix-it job) or will it just freak shoppers out when it helps strangers approach them? In New Jersey, for example, a stranger approaching while smiling is legal justification for using deadly force.Read more...

Most fared well, with a few exceptions. Coast's "service was a failure, and defied the objective of convenient click-and-collect." For Marks & Spencer, "a faster turnaround would be welcome." Homebase shoppers find that "the tight deadline for pick-up and limited availability is a drawback." These lessons learned, among others, certainly apply to the U.S., and this report offers an opportunity to avoid the hiccups suffered by our European counterparts.Read more...

The less good news—at least from a QSA's perspective—is that Visa seems to have joined MasterCard in relegating PCI compliance to an afterthought. Read more...

On the surface, the additions are innocuous, with new punch-card-like functionality integrated into the system. The effect of this, though, is for retailers to even more completely turn over crucial information to Square, which can use it for whatever purposes Square wants. If Square later wants to market to a retailer's customers directly—on behalf of itself or even possibly a rival—it theoretically can.Read more...

The good news: Virtually all the large retailers got their response times down under the fabled three-second mark. The bad news: There's no longer a clear correlation between speed and site size and the number of files requested, the variables that Pingdom tracked in this study.Read more...

What the pizza chain came up with is a way for consumers to make their own pizzas, with the touch intensity and finger distance used dictating how the dough will come up, whether the slices are cut uniformly and how evenly distributed toppings are. It's a game—for now.Read more...

In a letter the state ruled that cloud operations are fully taxable, assuming the end user is in Pennsylvania. "The ruling represents a marked departure from the department's earlier treatment of cloud computing. Prior department guidance advised that access to software solely through the Internet was not a taxable transaction, as long as the server did not reside in Pennsylvania."Read more...

But what choice does a retailer have? Even though it's a hassle, a chain can't simply opt to not support the leading browser, can it? Maybe not, but one Australian E-tailer has opted to fight back against one version of Internet Explorer: It's now charging customers a 6.8 percent IE7 tax.Read more...

Microsoft on Monday (June 18) set out to prove that retailers have alternatives to Apple for tablets and that Microsoft still matters. Unfortunately, it ended up proving the opposite—for both.Read more...

When Walmart started talking about its successes with its Pay With Cash Online program, consumers showed quite an interest in buying products online by making a promise to pay within 48 hours. And it didn’t take long for a company—completely unaffiliated with Walmart, as far as we can tell—to swoop in and offer to facilitate high-interest loans so underbanked shoppers can deliver the cash.

On Tuesday (June 19), Loans.net put out a statement about Walmart’s Pay With Cash program and pitched itself as a loan finder. (Thanks, guys, but Walmart can suck blood from shoppers who aren’t good at math all on its own.) There’s an irony here. Many consumers avoid credit cards because they don’t want to be on the hook for large interest payments if they can’t pay for everything right away. To address this, Walmart offers people a way to shop online for cash. Then a loan-finder vulture swoops in to charge those cash customers high interest. Guess there’s a reason you don’t hear about banker humanitarians very often. …

"Too many (U.K.) retailers still don't fully understand what skills are required to run the online channel," Newman wrote. "There tends to be too much emphasis on technical skills and not enough on core retailing requirements such as good old-fashioned day-to-day trading." Some good thoughts there for retailers on any continent.Read more...

One reader who is now working with a major hosting company on a cloud contract specifically had this experience. He asked the vendor to accept contract wording identical to statements that hosting firm had publicly applauded. The vendor refused, saying "the CSA is a marketing and collateral document. It was not created to be a contractually binding document."Read more...

Does traditional mobile commerce have a shot anymore in the U.S.? Or has the industry muddied it up to the point where we need to start over, as Apple and Burger King are trying? We tried to address that politically sensitive topic in the first of our new monthly columns with Retail Week, the U.K.’s largest retail publication.

The reasons why mobile is having trouble are plenty, but it’s fair to say that when MasterCard is the one arguing that mobile payment PCI regulations should perhaps be ignored, something has changed. When MasterCard starts to sound like the most rational and reasonable one in the room, Alice, you know you’ve gone through the looking glass. Please check out the column on Retail Week or, if you’re not a Retail Week subscriber, you can check out a picture of the column right here. …

There are several ways Apple could do that. But one thing seems clear: After the fruitless straining of Google Wallet, ISIS and PayPal to get customers and retailers on board, Apple's design philosophy of "it just works" means the impact on retailers of iPhone mobile payments should be nearly invisible—except that customers may actually use it.Read more...

Burger King's method can work on any iPhone or Android, completely denies any payment-card data to the retailer (keeping the whole trial out of PCI scope), requires no hardware changes and is all based on a cheap printed QR code stuck on the back of the POS or on a drive-through window.Read more...

Domino’s Pizza released an eye-opening figure on Monday (June 11): It has sold more than $1 billion worth of pizza (from mid-April 2011 to mid-April 2012) solely through digital channels. With all of the talk about the chain’s two mobile apps and its dedicated mobile site, that billion seems to suggest the power of mobile. But what Domino’s did not say in its statement tells a very different story.

Although it’s quite true that mobile sales are soaring, it turns out that 93 percent of those billion dollars worth of digital sales were on the plain old Web site. And 70 percent of sales are still the phone into a brick-and-mortar type. There shouldn’t be much of a stunner in that 93 percent figure, but with all of the mobile hype going on, it’s important to remember that figure to keep things in context. (Note: Domino’s also said that it’s selling more through its iPhone app than through Android. Given that the iPhone app has been out for several months longer, according to Domino’s spokesman Chris Brandon, that may not mean much.)…

Why would almost half of the people who specifically are using a cash-only program end up using a payment card or check? Walmart theorized that those shoppers may be scared to use payment cards online. In mid-2012, could this be true? For walmart.com Chief Executive Joel Anderson's argument to work, we have to believe that there exist a lot of consumers who are fearful enough of E-tailers that they won't give them their Visa card online, but who are not so fearful that they hesitate giving it to an associate at the store. Even though the payment data is stored in the exact same place.Read more...