3 ms·

PCI compliance sales is often much worse than SEO. The economics of selling SEO services revolve around spending money to make things better. Conversely every

PCI compliance sales is often much worse than SEO. The economics of selling SEO services revolve around spending money to make things better. Conversely every unsolicited interaction with a PCI auditing firm I've had has been a thinly veiled threat of how many times over we'd be personally bankrupted if an application were flawed. "Look at these people. People like you. They had a nice app and then their app accidentally leaked the names of some child users and now they're in prison on Mars. It'd be a real shame if somebody were to test your application and find a flaw like that and you hadn't hired us. A real shame."

CiPHPerCoder 10y ago
This is precisely why, despite being a software security consultant, I don't cold email folks. Even if they don't perceive it as a threat, it feels too much like one to even write such an email.
- akshatpradhan 10y ago
  Hi, I tried to explain the other deeper complex situation happening with PCI below but it was flagged? Image of flagged post: http://i.imgur.com/eCZHAyJ.png http://i.imgur.com/eCZHAyJ.png This is the reddit link I was referencing in the image: https://www.reddit.com/r/sysadmin/comments/4z25cb/hipaa_breach_case_results_in_record_55m_penalty/d6t5wjd https://www.reddit.com/r/sysadmin/comments/4z25cb/hipaa_brea... If you don't like my HN comment, at least read that reddit post. We need PCI because of the crap observed from that reddit post. "Speaking of PCI, I remember having to tell the PRESIDENT of the company I used to work for that "No, I will not print out the customer database with full CC+3, including their name, address, and phone number. You could ruin the business." Took a while to really make him understand that." If you need a PCI Auditor, make sure they have a background like me: http://www.linkedin.com/in/akshatpradhan http://www.linkedin.com/in/akshatpradhan That's all I want to say. No need to flag me for it...gratuitous negativity?
  - CiPHPerCoder 10y ago
    > If you need a PCI Auditor, make sure they have a background like me Maybe you're being flagged for the blatant self-promotion? I can't say for sure, as I wasn't the one who clicked 'flag'. You may want to tone it down a bit.

CiPHPerCoder 10y ago

This is precisely why, despite being a software security consultant, I don't cold email folks. Even if they don't perceive it as a threat, it feels too much like one to even write such an email.

akshatpradhan 10y ago
Hi, I tried to explain the other deeper complex situation happening with PCI below but it was flagged? Image of flagged post: http://i.imgur.com/eCZHAyJ.png http://i.imgur.com/eCZHAyJ.png This is the reddit link I was referencing in the image: https://www.reddit.com/r/sysadmin/comments/4z25cb/hipaa_breach_case_results_in_record_55m_penalty/d6t5wjd https://www.reddit.com/r/sysadmin/comments/4z25cb/hipaa_brea... If you don't like my HN comment, at least read that reddit post. We need PCI because of the crap observed from that reddit post. "Speaking of PCI, I remember having to tell the PRESIDENT of the company I used to work for that "No, I will not print out the customer database with full CC+3, including their name, address, and phone number. You could ruin the business." Took a while to really make him understand that." If you need a PCI Auditor, make sure they have a background like me: http://www.linkedin.com/in/akshatpradhan http://www.linkedin.com/in/akshatpradhan That's all I want to say. No need to flag me for it...gratuitous negativity?
- CiPHPerCoder 10y ago
  > If you need a PCI Auditor, make sure they have a background like me Maybe you're being flagged for the blatant self-promotion? I can't say for sure, as I wasn't the one who clicked 'flag'. You may want to tone it down a bit.