Tag Info

New answers tagged

1

First, let me start by saying that it may or may not be illegal for your friend to do this, but it will catch up with him. The vendor still has his information and a bill and can still collect it. The simple fact that he was over-drafting the card doesn't mean that he doesn't have to pay when he is tracked down. Similarly, it may actually cost him more ...


10

This isn't so much an authorization question as it is a fraud question. The defrauder is taking advantage of the known offline condition to incur a debt that he does not intend to repay. As a prior answer explained, there are two phases in using a credit card. The first phase is authorization, where the merchant gives the account information and ...


1

These are not PCI requirements. You should read the PCI DSS E-commerce Guidelines. Section 3.4 describes "Common E-commerce Implementations" such as: 3rd party API with Direct Post iFrame embedding 3rd party payment page in Merchant's site Redirection to 3rd party payment page and, to quote, These examples are intended to be representative of only ...


2

Opening a new window or iframe does not change the protections provided by the Same-Origin Policy. The origin inherit ice rules for iframes prevents two different domains from accessing each-others data. There is no security or PCI-DSS requirement that would require a redirect from/to a payment gateway. This maybe a usability requirement mandated by a ...


1

You are absolutely correct. Storing the credit card on the device as it is currently being stored would be asking for trouble and would not be in line with PCI-DSS guidelines. One of the "Don'ts" on the PCI-DSS compliance states "Do not store cardholder data unless it is absolutely necessary" and beyond this there would need to be adequate measures to ...



Top 50 recent answers are included