An anonymous reader writes "Credit card details falling into the wrong hands is probably one of the biggest risks any online retailer can face. There are many different approaches to securing this data and yet we are continually hearing about another batch having been liberated from those entrusted to keep it safe. What are the best policies to have when persisting payment information for customers? What are the worst?"
"If you want to eat hippopatomus, you've got to pay the freight."
-- attributed to an IBM guy, about why IBM software uses so much memory