Geek.com : Citibank Payment System Flaw I like the opinion on this piece. The web will never be secure if websites don't respond quickly to security problems. Citibank was lucky this time, they were notified, and after 3 months fixed the problem, before user accounts could be drained.