on 13/08/02 1:39 PM, Jason Wong ([EMAIL PROTECTED]) wrote:

> On Tuesday 13 August 2002 10:29, Justin French wrote:
> 
>> Needless to say, this is not light work.  You should seriously consider
>> paying someone to do this properly for -- at least the first time, and try
>> to learn off them.  You should spend lots of time talking with your host
>> about security holes, and most importantly, you should destroy the cc
>> details as soon as you no longer need them -- 20 cc#'s stored is less
>> desirable to a hacker than 2000, or 20,000 cc#'s.
> 
> But how would the person breaking in know how many CC#'s you were storing?
> Reminds me of the signs that you see in some stores -- "Our staff do not have
> access to the safe".
> 
> So you can have on your website "Hackers please note we only store twenty
> credit card numbers at any one time" :)

Hehehe that wasn't quite the point I was trying to make :)

Only storing 20 is less risk than 20,000.  Storing zero is the safest.


Justin French


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to