> This gives credence to the people who argue that PCI isn't really a security standard, but just a way to shift blame after a breach. Which it is! What is re

> This gives credence to the people who argue that PCI isn't really a security standard, but just a way to shift blame after a breach. Which it is! What is really needed isn't a better PCI, but a better credit card system - one where a breach has little impact on credit card holders.