4 ms·
Still recall running across a vendor that was hashing credit cards using MD5. Asked them why, and their response was that they were PCI compliant. Called the ma
by nxzero 11y ago
Still recall running across a vendor that was hashing credit cards using MD5. Asked them why, and their response was that they were PCI compliant. Called the main PCI line, asked them if MD5 hash was an acceptable way to store credit cards securely, and the answer was yes.
- mentat 11y agoHow many bit of entropy are in a credit card? I ran the numbers a few years ago but don't remember now. Well within a very small rainbow table in any case.
- CiPHPerCoder 11y agoYou have 10^15 possible values from a 16-digit CC number (due to Luhn's algorithm). The first 6 are for the issuer/bank; if you know that, you have 10^9 or about 30 bits of possible values.
- deleted 11y ago[deleted]
- Joof 11y agoStores in our college had them being sent out in plain text. They wouldn't change to secure equipment and would occasionally plug the internet into the college servers where we watched them...