Hello everyone and happy new year.<\/p>\n
PCI compliance requires CC’s be encrypted, yet every other online store I’ve encountered STORES the ENCRYPTION KEY on the box, usually somewhere in the store’s code. What’s the point? Who does this deter? <\/p>\n
Even if the CC’s are encrypted, what’s to stop someone from just grabbing the CC’s and all the payment info entered before its sent to the database? Does PCI compliance protect against this? No. <\/p>\n
The problem with PCI compliance is people blindly trust that it’s good enough for their needs. Good enough to protect them from the boogy man. Its not.<\/p>\n
That’s my 2 cents on that.<\/p>\n
What I’m working on:
\nFinishing Brutus 2 – Electric Boogaloo
\nFinishing a web services fuzzer
\nFinishing cracking a .net managed assembly for a copy protection scheme used by a well known company (will definitely make a blog post out of it)
\nFinding things to do to keep my sanity.<\/p>\n
Check back soon.<\/p>\n","protected":false},"excerpt":{"rendered":"
Hello everyone and happy new year. PCI compliance requires CC’s be encrypted, yet every other online store I’ve encountered STORES the ENCRYPTION KEY on the box, usually somewhere in the store’s code. What’s the point? Who does this deter? Even if the CC’s are encrypted, what’s to stop someone from just grabbing the CC’s and […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[35],"_links":{"self":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts\/283"}],"collection":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/comments?post=283"}],"version-history":[{"count":1,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts\/283\/revisions"}],"predecessor-version":[{"id":284,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts\/283\/revisions\/284"}],"wp:attachment":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/media?parent=283"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/categories?post=283"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/tags?post=283"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}