177 reputation
9
bio website betareduction.wordpress.com
location London, United Kingdom
age 32
visits member for 1 year, 8 months
seen 31 mins ago

I am a software developer, who also happens to have a great many other interests in life. One of them is linguistics (and languages in general). My native language is Portuguese and, at the moment, I'm commited to the Portuguese Language & Usage proposal. If you love that language and admire its tradition as much as I do, please commit to it and be part of a great lusophone community!


Oct
14
awarded  Popular Question
Jul
2
awarded  Curious
Mar
25
awarded  Popular Question
Oct
1
comment How can Stripe be PCI-compliant?
Ok, but Stripe is just a payment gateway. They still need to send the CVV to their acquirer when making a transaction. And ultimately, it's not Stripe who decides whether the user knows or does not know the CVV; it's the credit card issuer, right? What am I missing?
Aug
29
asked How can Stripe be PCI-compliant?
Feb
25
accepted Can change management for PCI compliance be accomplished via simple emails?
Feb
5
awarded  Citizen Patrol
Feb
1
asked Can change management for PCI compliance be accomplished via simple emails?
Jan
31
accepted How to satisfy requirement 10.6 of PCI DSS?
Jan
31
accepted “Due diligence” in PCI requirement 12.8.3
Jan
31
comment Requirement 12.1.2 of PCI DSS: Is it enough to point to a standard process?
It's our first PCI assessment, so we haven't yet gone through the annual process yet. But even if we had, couldn't we just show the resulting documents? I mean, the list of threat sources, vulnerabilities etc?
Jan
31
asked Requirement 12.1.2 of PCI DSS: Is it enough to point to a standard process?
Jan
30
asked “Due diligence” in PCI requirement 12.8.3
Jan
29
awarded  Scholar
Jan
29
accepted What should I have prepared for a PCI compliance onsite assessment?
Jan
29
comment How to satisfy requirement 10.6 of PCI DSS?
If I understand you correctly, to satisfy this requirement, we need to have an experienced sysadmin, who will analyze the logs and, based on his experience and a bit of gut feeling, spot potential threats. So, how do I explain this to the QSA in a written procedure document?
Jan
29
awarded  Supporter
Jan
29
awarded  Editor
Jan
29
revised What should I have prepared for a PCI compliance onsite assessment?
added 330 characters in body
Jan
29
asked What should I have prepared for a PCI compliance onsite assessment?