Really stupid security policies

In increasing order of stupidity:
3) India Today.
Hides all its content behind a *four digit* subscription number. Because there are only a a thousand possible numbers and more than a million subscribers, what is the chance that an enterprising guy can be kept away from the content? And what are the chances that a genuine subscriber will take the effort to visit the site?
2) The Economist
Offers some content free, has some premium content for which, like India Today, you have to enter the subscription number. But unlike India today, the subscription number is 10 digits long. So far so good. I go to the page where I am supposed to enter the subscription number. The instructions contain a 10-digit sample subscription number. On a lark, I enter the number into the space provided, thinking “They can’t be that stupid.”

Turns out they were.
1) landmark.sify.com
Contains a good collection of books (but a badly normalized database). Asked me for a credit card number. “Do they accept debit cards?” My curious mind wants to know. I enter my debit card number. It accepted the number then. A day later, I get a rejection mail saying that they don’t accept debit cards after all. Two days later, I get the book.
My debit card wasn’t charged.