Re:Booking.com hackers increase attacks on customers
by jacquesm on Friday December 01, 2023 @10:50AM
(#38488142)
They already do so. The card data is not stored 'in plain text', but encrypted at rest. But for the Hotels there are interfaces that allow these to be exposed to the Hotel employees (accesses of such information are logged). Just prior to displaying them they are decrypted.
Re:Booking.com hackers increase attacks on customers
by callalex on Friday December 01, 2023 @12:24PM
(#38489370)
You have your facts wrong. https://arstechnica.com/information-technology/2023/02/myste...
Re:Booking.com hackers increase attacks on customers
by jacquesm on Friday December 01, 2023 @12:43PM
(#38489627)
Would it pain you to spell out which of the facts are wrong?
Re:Booking.com hackers increase attacks on customers
by callalex on Friday December 01, 2023 @12:48PM
(#38489710)
For the “encrypted at rest” statement I guess it depends on your definition of “at rest”. Email passes through many hands, and random mom-and-pop shops definitely aren’t using PGP. So any emailed credit card information is being stored on many different computers. In theory those kinda of logs should be purged regularly, but who knows.
The real solution is for the credit card companies to lay down requirements for these merchants (no storing in plain text).