3 ms·
Aren't the rules functioning properly in this case by identifying a real problem? Namely, that you shouldn't have credit card numbers inside an insecure system
by smallnamespace 10y ago
Aren't the rules functioning properly in this case by identifying a real problem?
Namely, that you shouldn't have credit card numbers inside an insecure system, whether a ticket tracker or an answering machine.
- tzs 10y agoMy point is that credit card numbers can end up on almost any system that has data entered (directly or indirectly) by end users, even if it is not a system that is part of your actual credit card processing path. Heck, I've seen people somehow end up putting a credit card number in the address field when giving their shipping address, on a form that was nowhere near anything that actually asked for a credit card number.