On the modern web, ISPs are one of your threats (2015)

Re:On the modern web, ISPs are one of your threats (2015) by ThrustVectoring on Saturday November 26, 2016 @03:55PM (#13045796)

This is at least complicated somewhat by PCI compliance. Are you allowed to store irrecoverable hashes of card numbers?

[ Parent | on HN ]

Re:On the modern web, ISPs are one of your threats (2015) by mcpherrinm on Saturday November 26, 2016 @05:35PM (#13046332)

Yes, you can store tokens representing a credit card number (whether an hmac, database identifier, etc) outside of PCI scope. https://www.pcicomplianceguide.org/how-you-can-use-tokenizat...

[ Parent | on HN ]

Re:On the modern web, ISPs are one of your threats (2015) by qwename on Saturday November 26, 2016 @04:28PM (#13045968)

I am not familiar with the PCI compliance stuff, but I found this after a quick search: "How Companies Learn Your Secrets" http://www.nytimes.com/2012/02/19/magazine/shopping-habits.h...

[ Parent | on HN ]

Re:On the modern web, ISPs are one of your threats (2015) by tracker1 on Sunday November 27, 2016 @08:37AM (#13049049)

You don't need the card number, the name + zip (+ store location) is enough to correlate enough of the time.

[ Parent | on HN ]