I found copies of papers taken from the net relating to a messy case about Diners Club, Citibank, a South African couple and some Cambridge computer researchers. Citibank were saying that as their system was secure, the £19000 or so clocked up on the card concerned had to be due to the card holders, who claimed ignorance of it.
Anyone know what happened to this case since last year? Seems rather relevant to current chip & pin discussions.