For your security, please email your credit card and driver’s license
1–10 of 70 posts
Re: For your security, please email your credit card and driver’s license
#2"Fines will be levied in all cases where merchants are the subject of a security breach and upon investigation are found to be non-compliant. The average fines levied for a small merchant total around £15,000 which is payable on top of any forensic investigation and remediation costs."
This is mitigated quite a bit by the extreme difficulty to report PCI-DSS violation before they lead to outright fraud.
Re: For your security, please email your credit card and driver’s license
#3"Fines will be levied in all cases where merchants are the subject of a security breach and upon investigation are found to be non-compliant. The average fines levied for a small merchant total around £15,000 which is payable on top of any forensic investigation and remediation costs." This is mitigated quite a bit by the extreme difficulty to report PCI-DSS violation before they lead to outright fraud.
I believe there is a PCI requirement that a company's system must be evaluated once every three months by a PCI approved vendor to ensure that data is being kept secure.
To me, it seems kind of contradictory because if a company is being approved by said vendors, then how could they be found non-compliant in a breach? Maybe the quarterly vendor assessment isn't mandatory. digs through documents
EDIT: This quarterly scan by an ASV and only evaluates the network in regards to external IP addresses, so it does not check anything regarding how the data is stored/transferred.
Re: For your security, please email your credit card and driver’s license
#4What is with content that can't be seen unless you enable social media plugins?
In this case, I'm not sure its intentional (looks related to how Disqus is embedded), but this is one of several such cases in the last couple weeks.
Re: For your security, please email your credit card and driver’s license
#5So say a restaurant wants me to give them my card details to make a reservation but I'm in a crowded place (like on a train). I offer to email the details and they accept. I know it's bad but I would rather email my details then say it loudly over the phone and have everyone hear it. Now did they break PCI? Or not because I was the one who offered to send my details.
How does one send their credit card details securely to a brick and mortar store?
Via email I know it's insecure but if unauthorized charges do appear I can (and will) contest them and get a new card, so really the bank is taking on risk.
Re: For your security, please email your credit card and driver’s license
#6So say a restaurant wants me to give them my card details to make a reservation but I'm in a crowded place (like on a train). I offer to email the details and they accept. I know it's bad but I would rather email my details then say it loudly over the phone and have everyone hear it. Now did they break PCI? Or not because I was the one who offered to send my details. How does one send their credit card details secure…
I always go directly to the companies website to give information like this. You can't fall for the dancing bunny if you never ever respond through email.
Re: For your security, please email your credit card and driver’s license
#7So say a restaurant wants me to give them my card details to make a reservation but I'm in a crowded place (like on a train). I offer to email the details and they accept. I know it's bad but I would rather email my details then say it loudly over the phone and have everyone hear it. Now did they break PCI? Or not because I was the one who offered to send my details. How does one send their credit card details secure…
I always go directly to the companies website to give information like this. You can't fall for the dancing bunny if you never ever respond through email.
That would require them to have an e-commerce presence. I was wondering how one would give it to a brick and mortar store (meaning one without facilities to accept them online securely).
Re: For your security, please email your credit card and driver’s license
#8What is with content that can't be seen unless you enable social media plugins? In this case, I'm not sure its intentional (looks related to how Disqus is embedded), but this is one of several such cases in the last couple weeks.
I can see it. Does that mean I have some "social media plugin" enabled? I don't even know what that is, but I don't like the sound of it.
Re: For your security, please email your credit card and driver’s license
#9What is with content that can't be seen unless you enable social media plugins? In this case, I'm not sure its intentional (looks related to how Disqus is embedded), but this is one of several such cases in the last couple weeks.
I have Ghostery and RequestPolicy on, and I can see the content fine.
Re: For your security, please email your credit card and driver’s license
#10What is with content that can't be seen unless you enable social media plugins? In this case, I'm not sure its intentional (looks related to how Disqus is embedded), but this is one of several such cases in the last couple weeks.
[deleted]