Have you ever heard of Web application vulnerabilities, California’s 1386 law, or the security requirements of MasterCard’s Site Data Protection Program