3 ms·
This is at least complicated somewhat by PCI compliance. Are you allowed to store irrecoverable hashes of card numbers?
by ThrustVectoring 10y ago
This is at least complicated somewhat by PCI compliance. Are you allowed to store irrecoverable hashes of card numbers?
- qwename 10y agoI am not familiar with the PCI compliance stuff, but I found this after a quick search: "How Companies Learn Your Secrets" http://www.nytimes.com/2012/02/19/magazine/shopping-habits.html http://www.nytimes.com/2012/02/19/magazine/shopping-habits.h...
- mcpherrinm 10y agoYes, you can store tokens representing a credit card number (whether an hmac, database identifier, etc) outside of PCI scope. https://www.pcicomplianceguide.org/how-you-can-use-tokenization-to-reduce-pci-scope/ https://www.pcicomplianceguide.org/how-you-can-use-tokenizat...
- tracker1 10y agoYou don't need the card number, the name + zip (+ store location) is enough to correlate enough of the time.