Misdeeds and security

We all know someone whose approach to security is a little bit different from our own. I think about the former colleague who locked an empty cupboard while leaving its contents strewn merrily around the room; I think about the office I used to work where an ear-splitting alarm went off every time someone opened the front door (so people used to leave it wide open most of the time, to avoid the noise).

And now I can add good old M&S to the list of entities whose approach to security is counterproductive and baffling. I recently ordered a pair of trousers from the website with a gift card. The gift card was a present from my in-laws. To use the card online, the serial number isn’t enough; you need to type in a PIN, which is hidden behind a scratch-off surface. The problem is that it’s almost impossible to scratch off the surface in a way that leaves the PIN intact. I’ve had this problem with every M&S gift card I’ve ever used, and it’s stressful. Because if you render it unusable trying to see the PIN, it’s your problem. M&S won’t take any responsibility for damaged cards.

Anyway, I arranged for in-store collection and ticked the box saying “Don't associate any credit cards with this payment”.  There was some blurb warning that if I ticked the box and my gift card was found wanting, there might be a delay with my order while they took my credit or debit card details. But I wasn't worried because I knew there were enough funds on the gift card.

The next thing that happened? They asked for my credit card details anyway. Why? Apparently I had triggered a security concern with my wildly out-of-character behaviour; I’d never ordered an item for in-store collection before, and I would have to enter my credit card details to prove I was me.

How wrong is this? Let me count the ways. For a start, if I walked into a physical store with the gift card, nobody would challenge my identity. Nobody would even ask about my identity. But because it’s a website, first they force me to register before I can buy anything, then they start keeping track of my buying behaviour. The “security” aspect of this breaks down if you expose it to the tiniest bit of sunlight: what exactly is the risk here? That someone has stolen my identity in order to log in to the Marks & Spencer website as me, buy a cheap pair of trousers in my size, order them to be delivered to a store near my house and pay with a gift card?

What stopped me abandoning the whole transaction? The sunk cost fallacy, I guess. I’d already spent time finding a nice item in the sale, going through the ordering process, trying to read the PIN on the gift card, etc. So I went ahead and supplied my credit card details. The transaction went through.

Then I got a confirmation email saying that there were two payment methods for the item. So my credit card had been charged after all? Or not?

I contacted M&S to complain. They don’t have the courtesy to supply you with a real email address; instead you have to fill in a hateful webform. So I don’t have a record of what I wrote. I just know that I mentioned:

• the terrible design of the gift cards, where trying to use them online carries a high risk of damaging them so they can’t be used (and you won’t get the money back either).
• my deep unhappiness at the fact that they required me to supply my credit card details to prove I was me. Because if they could use those details to verify my identity, that means they’ve been storing my credit card information without my consent.
• the confusing email that didn’t make it clear how payment was eventually taken - I knew the text might have been boilerplate, but I have no way of differentiating "automatically generated boilerplate" from "stuff they're actually trying to tell me".
• the confusing nature of the online purchase process. I begged them to do some user testing.
• The fact that I was being forced to contact them through a webform at all, instead of being supplied with an email address.

I got a reply a few hours later that was quite impressive in its failure to address any of these concerns at all. Apparently my comments will be forwarded “to the e-commerce team for their consideration” but I didn’t get a response about any of the specific issues I raised, of which the biggest was my worry that they’ve been storing my credit card details without my knowledge or consent.

The person who replied obviously had sort-of-read my email because she confirmed that payment for the item would be taken from the gift card only, but it didn’t really address my comment about the lazy boilerplate text that said something different. She also advised me that I should have ticked the box saying “Don’t associate any credit cards with this payment”. Ah, that would be the box that I ticked, wouldn’t it?

And of course, I can’t follow up on this by replying to the email I received, because it was sent from a no-reply address (another sign that an organisation isn’t really willing to engage in dialogue). If I want to get in touch again, I have to do it through the webform or (as they suggest) through the even worse “Help” section of the website. This is their way of saying “Go away now, stop trying to tell us how we can improve things.” And this blog post, like most Restless Consumer blog posts, is my way of saying: “OK then – if you don’t want to hear it, at least I can warn other potential customers.”

I’ve always been a huge fan of the M&S brand. Have been for most of my adult life. That’s why I keep asking for M&S vouchers for Christmas and birthday presents. My experience today has really, really damaged how I feel about M&S.

Update: they emailed me to say my item was in-store. More stupid, misleading boilerplate text about how they'd taken payment from my card even though they hadn't.

I'm gonna cherish that chicken 'neeth the green bay tree

So, in February, I saw some small bay trees in Tesco; they were meant as mother's day presents.  They looked a lot like this small bay tree from Trees Direct, even down to the sackcloth wrapping, although, as I recall, the ribbon was polka dotted.  "Shall I buy it?" I asked my neighbour, whom I had run into in Tesco that night and spoken to for the first time in three years.  "Yes, yes, do," he said, looking very abstracted.  He's had a baby in the interim.

Oh, that winter.  It felt like a thousand years.  Nonetheless, the bay happily stood in a window where it received sun for three hours or so a day and started sprouting leaves, keeping company with an over-wintering chilli bush.  I started using the odd leaf here and there; mainly for potatoes dauphinoise, but also in chicken stews and, most recently of all, in caramelised onion chutney.  Over the three months I learnt that the older leaves, not the newer ones, release more scent, and that you don't need to dry the leaves, merely warm them in your hands before using.  The bay has a cinammony, nutmeggy smell, with undertones of spice and warm rum.  It's become one of my favourite herbs, but the tree is growing faster than I can use it.

So, I am doing some research on how to dry bay leaves, thinking I can give them away for Christmas, somehow, and I come across a warning that culinary bay, laurus nobilis, can easily be confused with mountain bay, kalmia latifolia which is highly poisonous, and this is why people say bay is poisonous, but it isn't really, but do be careful to make sure you know which bay it is that you are eating, boys and girls.

I freaked out a bit at this point, because I didn't know if my bay was laurus nobilis or kalmia latifolia.  Wikipedia, as you can see, is not that helpful, the point being that the leaves from the two plants are actually incredibly similar-looking. So I sent a letter to Tesco, via their website.  They acknowledged receipt on April 24th.  I can't remember my exact wording, but as I recall, the thrust of my question was: "I bought this plant from you in February, I've been using this plant for cooking, but would like you to confirm that it is laurus nobilis and not something toxic."  Perhaps I said that I wanted to use the plant for cooking, giving the impression that I hadn't yet.  I'm not sure.

Anyway, I get no further contact from them, and in the meantime, make some onion chutney, heavy on the bay (three leaves to a pound of onions) and light on the red wine vinegar (that is, no red wine vinegar at all - I am experimenting with balsamic and cider vinegar to get an undertone of apples) and am contemplating further experiments with onion chutney, all of which feature the bay at the centre of the taste spectrum.  In fact, I go so far as to buy some Kilner jars and some apple balsamic vinegar to go with the cider, thinking that onion chutney might make nice Christmas presents, etc, etc, but it's going to be my onion chutney, with a difference (and a lot of bay). On Friday or Thursday, just after I had returned from work, via the shops, with the afore-mentioned vinegar, I get a phone call from Tesco. A woman.

"Oh," I said, delighted.  "Is it about my bay tree?"

"Has anyone else spoken to you about this?" asked the woman. She was very Welsh.

"No," I said.  "So, is it laurus nobilis or not?"

"Don't eat from it!" said the woman.

"What?" I asked.  "I already have," I said.

"How much?" asked the woman.

"Oh, you know," I said, hand waving with my voice.  "In some recipes, you know. Maybe about ten".

"Well, that should be OK," said the woman.  "But don't use it any more!"

"But, but, but ... " I said.  "Why?" I asked. "Is it poisonous?  Is it Mountain Bay and not laurus nobilis?"

"We don't sell it for culinary use," she said, and repeated that several times in between giving me instructions not to use it in cooking several times.

"What is it?" I asked.  I was a little suspicious by now; I seemed to be on the end of some corporate bollocks.  "Is it laurus nobilis?"

"I don't know what it is," said the woman.  "I've just got an instruction here that it is not for consumption.  Don't eat it!"

Curiouser and curiouser.  I'm a little upset.  I mean, I'm not dead, but if the plant is poisonous enough for me to be instructed not to use it for culinary purposes, and I have, I would like to know what the risks are, what the plant is, and what are the symptoms I should be looking for.  I get none of this information.

Plus, if the plant is so poisonous that I MUST NOT EAT IT, why take (counts) NINE DAYS to get back to me to tell me I must not eat it when that is clearly what I have in mind to do.

So I do some more research and put plaintive pleas up onto the internet for someone - anyone - to tell me if my Bay Tree is trying to kill me or not.  I use these two pictures:

 

I even send a tweet, or a series of them, to James Wong.  He's an ethnobotanist. 

( SAID ETHNOBOTANIST, DEAR!)

 (I've had no answer yet, but I expect he's been busy with Countryfile)

One of my friends points out that if it smells like a culinary bay and hasn't killed me, then it is probably a culinary bay.  A different friend points out that, empirically, I haven't died yet, so there's a large chance that it's not toxic.  I can see, rationally, that they both have a point, but in my mind I counter this with tales of toxic build-up e.g. Mercury and also that I don't really know what a bay tree smells like; I just know what my tree smells like (cinnamon and nutmeg and days in the sun).  So I come up with a plan.

The plan is this.  I will go to Tesco and buy some real bay leaves and smell them and compare them with the smell of the leaves from my bay tree, because I want to use a bay leaf in some fish pie for a recipe I'm working on for Jack Sprat. So, off I pop.

In Tesco, I'm out of luck.  There are no bay leaves although, apparently, there are three types of Aussie conditioner, three for the price of two, Berocca soluble vitamins, also three for the price of two, and some super-cheap Parmesan.  As I am about to leave, I notice, in the 'summer' section, a small plant looking very much like my bay tree did when I first saw it.  In fact, it is labelled as shown:

It is clearly called laurus nobilis.  And do you see that Tesco Top Tip, there? "Any leaves cut off when pruning can be dried and used in the kitchen." Ha!

I 'pruned' the plant of one leaf and slipped it in my pocket. It doesn't smell of much, but then it has been inside, bathed with the weak commercial light of high capitalism for some days; nothing would smell of much, given those conditions.

So I bring my leave back home and compare it with a leaf from my bay tree.  Here's the front of the leaves.  My bay tree is on the right.

 

And here's the backs of the leaves.

Now, to my mind, the confirmed laurus nobilis has veins leaving the central vein in a generally symmetrical mode, and my bay tree leaf, not so much.  The confirmed laurus nobilis leaf has very crinkly edges, and my bay tree leaf, not so much.  My bay tree leaf is a darker green. Both leaves smell similar, when I can coax something out of the confirmed leaf.   See above.  I'm not sure, however, that my hands haven't spread the smell from my bay leaf onto the confirmed leaf.  Both leaves are that strange combination of leathery and brittle that I have come to associate with my bay tree.

So I make the fish pie, using the purloined bay leaf, anyway.

What do you think, boys and girls?  Do I have a culinary bay or not?  Are the differences simply due to intra-species variation?  Am I in danger of poisoning myself with a residual insecticide?  Why could Tesco not simply tell me what the name of my tree is?  And would anyone like some caramelised onion chutney? It's going to be special.