The FTC approved its final orders and settled...

The FTC approved its final orders and settled charges against movie ticket seller Fandango and credit score monitor Credit Karma, said an agency news release Tuesday (http://1.usa.gov/XxUOH2). FTC complaints against Fandango (http://1.usa.gov/O6pZ6M) and Credit Karma (http://1.usa.gov/1f19QtS) alleged their mobile apps made consumer data, such as credit card information, “vulnerable to interception by third parties,” it said. The complaints also alleged the companies disabled their Secure Sockets Layer (SSL) certificate, which would have protected consumer data, it said. In the Credit Karma complaint, the FTC said even after the company addressed the disabled SSL certificate in February, it then released an Android version of its app with the same unvalidated SSL certificate. Both companies have since addressed their SSL deficiencies, said the complaints. The settlement, announced in March, requires the companies to establish “comprehensive security programs” and to “undergo independent security assessments every other year for the next 20 years,” it said (CD March 31 p8).