I note there's now a large warning on CJE's website (that I hadn't noticed before) informing me that the transaction system is not secure. I'm curious as to how long it has been there.
Not casting aspersions, you understand; I'm quite prepared to accept that this has been there for ages and my attention has never been drawn to it before now.
I've always bought RISC OS stuff either at shows or over the phone, so it's never really come up.
Also, I'd like to emphasise Wakeman's (and others') comment: while one should be aware of any possible security risks, there's a fair chance that the R-Comp and the fraudulent use of Richard Porter's card are as connected as the pen I carry in my pocket and me having never been mauled by tigers on the way to work.