withoutfire's user avatar
withoutfire's user avatar
withoutfire's user avatar
withoutfire
  • Member for 6 years, 9 months
  • Last seen more than 1 year ago
8 votes

Validating and storing credit card data for retrieval later

4 votes

How do companies like Uber and Paypal store card details? Is it possible to offer PCI compliance whilst saving credit card details locally?

4 votes

SAQ-D Service Provider without a CDE

3 votes
Accepted

Using an unknown hash algorithm for passwords and be PCI-compliant?

3 votes

Does transmitting first 6 and last 4 digits of the card number and expire date require PCI DSS compliance?

3 votes

PCI-DSS for Financial Institutions and Issuer

3 votes

How does a card issuer comply with PCI if they have to print PANs in clear text?

3 votes
Accepted

How does collecting sensitive data using iframes increase security?

2 votes

How to check validity of a PCI DSS Attestation of Compliance certificate?

2 votes
Accepted

What exactly are the characteristics of TLS required by PCI DSS and which reference describes these?

2 votes

Required security for storing bank transactions, but not credentials

2 votes

sensitive data temporarily stored, then redacted: PCI compliant?

2 votes

Payment device compliance of PCI v2 AND PCIv3

2 votes

PCI P2PE running as independent software on POS?

2 votes
Accepted

Are PCI DSS standard requirements regarding TLS applicable only to customer facing webs or to whole even internal networks?

2 votes
Accepted

Storing customer credit card information for manual processing later

2 votes
Accepted

PCI DSS compliance on storing email body in database which contains plain text password

2 votes
Accepted

PCI Compliance & Third Parties

2 votes

Cardholder info transmission between issuing and acquiring banks

2 votes
Accepted

PCI Compliance - Service Provider vs Merchant

2 votes
Accepted

PCI scope for credit card forms that talk to Stripe, Braintree, etc

2 votes
Accepted

Can biometric vectors (i.e. fingerprint vector) be considered as Sensitive Authentication Data (SAD) in PCI?

2 votes
Accepted

File Integrity Monitoring via Syslog-ng or agentless - is it possible?

1 vote

PCI DSS Protectecting Card Data Elements when Transmitting PAN

1 vote

Which Authentication mechanism to choose for PCI-DSS system

1 vote

Storing credit card information - encrypted at rest

1 vote

Monitoring User (developer) interaction

1 vote
Accepted

Is it allowed to store 8-digit BINs outside of CDE

1 vote
Accepted

Using MFA to connect to windows shares on domain controller

1 vote

What is the process to use previously-deployed POI devices in a PCI P2PE solution?