Internet security expert Victor Keong has good news and bad news for retailers who sell goods and services on the Web.The bad news is that he can penetrate security measures on nine out of every 10 retail Web sites he visits and, once inside, access customer information such as names, addresses and credit card numbers.