To those of you who have claimed that your CCs have been abused -- I checked mine (which I used to pay for Linode) and it hasn't been used to do anything funny.
(not knowing anything) - wouldn't it be possible to give the cc company a white list of clients that can continue to use it and block all other requests?
