News for hackers. Stuff that matters.

A comment on Ask HN: Are Cybersecurity Workers Ok?. Parent comment

Re:Ask HN: Are Cybersecurity Workers Ok? by randombits0 on Tuesday December 14, 2021 @12:22PM (#29554302)
That is the last thing business wants. The credit card brands developed PCI to avoid regulation. But in most circumstances, there is no 800 pound gorilla to enforce security standards.

If you do an in-depth read of the PCI security standards, you’ll see that the standards are about protecting the card brands, not you.

[ Parent | on HN ]
Re:Ask HN: Are Cybersecurity Workers Ok? by Nextgrid on Tuesday December 14, 2021 @12:53PM (#29554755)
PCI is a very bad example because when it comes to card fraud the liability is on the merchant, bank or card networks. So in that sense it's actually normal that PCI focuses on protecting card brands and not you because you are already protected by them and they're just trying to recoup the costs.
[ Parent | on HN ]