blaines

21 ms·

181.
by blaines 16y ago
Oh well that makes some sense - hopefully other companies are encrypting the data and not storing CVV. The crazy part to me is that these guys are storing this information for years (One of the first rows was from 2002, and the last 2010) a
182.
by blaines 16y ago
Thats an interesting idea, and it's in the budget :) I'll have a look at my options.
183.
by blaines 16y ago
You keep a copy of credit card numbers and CVV unencrypted in a database? Why wouldn't you use a third party/gateway to deal with CC data storage?
184.
by blaines 16y ago
While this is embarrassing for my client, they're only using the software as a service. So I'm more worried that my client may inform the service company, which is even more embarrassing for that organization. I know my client won't be upse
185.
by blaines 16y ago
I'd like to make this an opportunity, but definitely want things done right first. Since this software isn't mine or my client's software, but a service company's, I'm a bit leery to just call them up and tell them, "Hey I have all the CC#'
186.
by blaines 16y ago
I agree with your statement - and I am blaming PHP a bit, it's gotten better over the years but I have some resentment toward it still. I'll shift my blame to the developer for not completing their due diligence before writing software.
187.
by blaines 16y ago
Thanks for the advice! It's a service - like shopify - but definitely NOT shopify :) I'm just starting out, in college, so lawyers aren't in the budget...
188.
Ask HN: Crap, I just downloaded over 10000 Credit Card Numbers - Now What?
17 points by blaines 16y ago|26 comments