#O2 "only ever ask three random chars from your password" except #verifiedbyvisa http://twitpic.com/ctl0y1