Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am...
by datavirtue on Thursday October 04, 2018 @12:20PM
(#18141271)
You can totally fake your way through PCI audits. I know of a company that did it for years using a fake network and servers. Not sophisticated at all. Most auditors do not find all of the compliance violations. They have one person do it. It's all about money.
[ Parent
| on HN ]
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am...
by dogma1138 on Thursday October 04, 2018 @01:04PM
(#18141655)
You can fake a lot of things so what? That’s not the point, also PCI DSS is pretty crappy but the hardware vendor, payment provider and P2PEE certifications are a completely different story good luck faking it.
Sure you can send fake devices to be certified and sell something completely different but the same can be said for any certification and if you get caught boy or boy...