On the modern web, ISPs are one of your threats (2015)

Re:On the modern web, ISPs are one of your threats (2015) by qwename on Saturday November 26, 2016 @03:26PM (#13045670)

One could say that non-cash (debit/credit) transactions are recorded by the devices that enable them, and thus recorded and tied to an identity. The information could then be used by matching your card number when you use it online or elsewhere.

[ Parent | on HN ]

Re:On the modern web, ISPs are one of your threats (2015) by ThrustVectoring on Saturday November 26, 2016 @03:55PM (#13045796)

This is at least complicated somewhat by PCI compliance. Are you allowed to store irrecoverable hashes of card numbers?

[ Parent | on HN ]

Re:On the modern web, ISPs are one of your threats (2015) by mcpherrinm on Saturday November 26, 2016 @05:35PM (#13046332)

Yes, you can store tokens representing a credit card number (whether an hmac, database identifier, etc) outside of PCI scope. https://www.pcicomplianceguide.org/how-you-can-use-tokenizat...

[ Parent | on HN ]

Re:On the modern web, ISPs are one of your threats (2015) by qwename on Saturday November 26, 2016 @04:28PM (#13045968)

I am not familiar with the PCI compliance stuff, but I found this after a quick search: "How Companies Learn Your Secrets" http://www.nytimes.com/2012/02/19/magazine/shopping-habits.h...

[ Parent | on HN ]

Re:On the modern web, ISPs are one of your threats (2015) by tracker1 on Sunday November 27, 2016 @08:37AM (#13049049)

You don't need the card number, the name + zip (+ store location) is enough to correlate enough of the time.

[ Parent | on HN ]