3 ms·
> "approximately 120,000 transaction records from 2011 that contained hashed and salted credit card numbers have been accessed" Why oh why would you store the
by polemic 13y ago
> "approximately 120,000 transaction records from 2011 that contained hashed and salted credit card numbers have been accessed"
Why oh why would you store the number. Utterly unnecessary for recurring billing.
- Ardren 13y agoThe only thing that comes to mind is fraud prevention? But that only works if it's a global salt, rather than a per user/card salt.
- polemic 13y agoI don't buy it. You're exposing your users to massive risk in order to detect fraud on a product that effectively costs $0 for you to provide. I might understand it for a retailer that gets chargebacks for physical items shipped, but that doesn't make sense here.
- coldarchon 13y agoWhy would it be online accessible?