Re:Twitter hack has profound national security implications
by coderintherye on Thursday July 16, 2020 @02:06PM
(#23861858)
PCI is about payment cardholder data (credit card data). So, no, cause Twitter is free and you are not sending credit card data to them. However, if you applied the principals of PCI to all user data then possibly yes. The more valuable practice would be anti-phishing training for CS employees.
[ Parent
| on HN ]
Re:Twitter hack has profound national security implications
by lawnchair_larry on Thursday July 16, 2020 @02:15PM
(#23861986)
Anti-phishing training (and PCI in general) has made very little difference in my experience as a practitioner. Like most security remedies, there is no data to back up its efficacy, and no standard for how it should be done.