3 ms·
What concerns me is that I have to renew my IEEE membership very soon, and if they have the wrong logging enabled how can I be assured that they aren't logging
by typicalrunt 14y ago
What concerns me is that I have to renew my IEEE membership very soon, and if they have the wrong logging enabled how can I be assured that they aren't logging me CC details? I've seen it happen in one of my client's production systems, but at least they never put the log files up on a public FTP site.
I checked the ieee.org website and nothing about this has been mentioned yet. Not even a "We're investigating the allegation" snippet of news.
- danielweber 14y agoIn general, you may expect that even if GETs are fully logged, POSTs are not. You can check this on your own when you renew.
- freehunter 14y agoIf they're taking credit card information, they have to be PCI compliant. An auditor should notice pretty quickly if they're logging CC transactions. Not to say it can't happen and you're absolutely right to be suspicious, but if they are there will be repercussions.
- emidln 14y agoIf they don't do the processing themselves, they can fill out the self questionaire, which basically amounts to "pay the damn application fee already".