Re: its tesco, are you surprised?
Hmm, would be interesting to know how they got that past the PCIDSS auditors. A few years ago you could wave a bit of paper at them with a list of possible mitigations on it, but in recent projects I've been involved in the correct answer to the auditors saying 'jump' has been 'how high?'.