Tag Info

New answers tagged

0

It sounds like Authorize.Net's Customer Information Manager (CIM) would be a good solution. From http://www.authorize.net/solutions/merchantsolutions/merchantservices/cim/: Use Customer Information Manager (CIM) to tokenize and store your customers' sensitive payment information on our secure servers, simplifying your PCI DSS compliance as well as the ...


0

Some issues with contactless payments and digital wallets: Loss or theft -- an attacker gaining access to a device could allow access to the confidential information and allow continuous fraudulent transactions until accounts were disabled and/or fraud was caught. Pulling a SIM card could prevent even the most-stalwart lock and/or lockdown protections, and ...


1

The risks are more on the client end of things than your server side. What I mean by that is as a consumer I do not want my data going to your server for "processing" which then gets sent over to stripe/wepay. I dont know how you're transmitting the data or whether or not you're not storing it the way you say you are. Also from the consumer side of things if ...


5

If you think about the 'expected' usage, the CVV is simply supposed to mean that you physically have the card (so you can see both sides). With that starting point, the user will type in the card number from one side, then turn over and type the CVV. I appreciate that many people will have memorised the CVV and/or 16-digit number, so the assumption ...


50

Most likely answer: They don't have to (it's not a PCI requirement) It's better from a UI/support standpoint Let's keep this in perspective. This is the number that's printed, on the back of the card, right where minimum-wage cashiers are instructed to visually inspect when performing a POS transaction. Absolute secrecy from physical bystanders is ...


37

First, it's important to understand that security is not binary. It is not an "on" or "off" concept, but a continuum or risk management options, and each decision comes with a cost. Either the additional cost of controls or mitigation as you move toward the "secure" end of the spectrum, or the cost of exploitation as you accept more risk towards the ...



Top 50 recent answers are included