3 ms·
If they were using the CC information for nefarious identification I would think that would fall under "is access restricted".
by braveo 9y ago
If they were using the CC information for nefarious identification I would think that would fall under "is access restricted".
- dpark 9y agoNot really. If someone hands you their credit card and you refuse to sell to them because their card has a Star of David on it, you are doing something nefarious with CC information but not violating PCI. PCI is concerned with reducing fraud cost. Visa does not care if the business charging your card is shady, only that it doesn't result in extra costs to Visa.
- braveo 9y agoI'm sorry, but THAT is about the most ridiculous use of a strawman I've ever seen. Uber was using the CC information to LOOK UP MORE INFORMATION ON THE USER. Comparing that to someone simply refusing service is completely outlandish, uncalled for, and indicates a level of bias that is wholly unhealthy for both sides in this discussion.
- dpark 9y agoIt's not a straw man at all. Uber literally denied services based on who issued customers' credit cards (allegedly). That they recognized the bank as a police credit union instead of recognizing the Star of David as a Jewish symbol doesn't meaningfully change the scenario. PCI is not concerned about protecting the user. It's about protecting credit card companies. Visa does not care that Uber uses credit card information for nefarious business purposes. They care that Uber doesn't leak the credit card information they possess.