Tag Info

New answers tagged

0

QuaSAr is a "for pay" product designed to do just this. Disclaimer: I do not, nor have ever worked for confide, but have friends in the company.


0

From what I understand, you can find the data you need with tools like grep, but you are finding it difficult to deal with the resulting output because it, too, becomes sensitive data. It appears that you need sed with your grep. Once you find offending data, you can pipe the result through a substitution process to create obfuscated card numbers. But I'm ...


1

1) Yes, it is possible to breach Google Chrome. Even with the encryption, there would be somewhere password or private key. 2) It is not secure as not using autofill, however, you do not type in the autofill your CVV code, which is needed for a successful operation with the card. You can find more about CVV here: https://www.cvvnumber.com/


2

Is it possible for breaching google chrome and take my credit card information? Yes. As long as Chrome can use your number for auto completion, it has to be possible for Chrome to access it. If one program on your computer can do this, another program or a least humans can do it too. it's not stored with any type of encryption Even with ...


0

You can show the full credit card data as long as user passes the MFA(Multi factor authentication). Also phone number which is used to validate the MFA, should be attached to that user. No links should be available to redisplay the card data again. Also page should never be cashed.


0

Credit card data is not homogeneous. There is some information you can show and others you aren't even allow to store. For instance, you aren't allowed to store the CVV2 code. Yet other credit card data is the cardholder name, the transaction history, etc. So you have to look at it on a field-by-field basis. Generally speaking, best practice is minimization ...


1

Disclaimer: I Am Not A QSA; I Am Not A Lawyer My question is, if I wanted to offer similar service (i.e. make purchases on behalf of consumers with their cc info), must I (/are they?) be PCI compliant? Or, is it simply enough to (1) use SSL on my site and (2) never write CC info to my DB? Yes, you would need to be PCI compliant. You would be ...


1

Yes, you can generate off of a BIN (Bank Identification Number) which is the first 6 digits in the 16 digit credit card string. And if the BIN you are using expires, then depending on if it's a Visa or MasterCard, you can literally keep the month and increase the year by 3 or 4 years. But a far as numbers in general..... If you have a good high limit ...


2

In addition to the chance that a replacement card with the same PAN, but new expiration date and CVV has been issued (as noted by others in the comments), it can of course be used for spearphishing. Just knowing that John Smith has a platinum card with XYZ bank, and used it to pay for a 10-pack of Nutella sandwich spread opens up for sending him an email or ...



Top 50 recent answers are included