Re:Ask HN: Should I report my main competitor for PCI Violat...
by pc86 on Thursday January 01, 2015 @05:35PM
(#8824595)
> The activity isn't harming you, it only "harms" the people with a relationship with the company.
This is not true. As a vendor, I assume costs associated with PCI compliance and other industry-standard best practices. If my competitor is ignoring these I am fundamentally disadvantaged. It's not an equal marketplace at that point.
Whether intentional on the competitor's part or not, this is saving them money and placing their customers at risk of identity theft, financial fraud and who knows what else depending on what's stored in that database.
> But reporting him to the authorities? That's very Stasi-esque.
Holy hyperbole, Batman. As a customer, I deserve to know if my vendor is eschewing industry-standard security practices. And they should be mercilessly shamed if they are.
This is not true. As a vendor, I assume costs associated with PCI compliance and other industry-standard best practices. If my competitor is ignoring these I am fundamentally disadvantaged. It's not an equal marketplace at that point.
Whether intentional on the competitor's part or not, this is saving them money and placing their customers at risk of identity theft, financial fraud and who knows what else depending on what's stored in that database.
> But reporting him to the authorities? That's very Stasi-esque.
Holy hyperbole, Batman. As a customer, I deserve to know if my vendor is eschewing industry-standard security practices. And they should be mercilessly shamed if they are.