Agreed.. I did mention that it's possible to be PCI compliant without
using a closed solution. But it would be much harder (for example the
data user / DBA user role separation requirement seems -- at first
glance, to me -- not possible using MySQL). Even if it were possible,
you'd have a lot more integration to do.

Some of Joebert's ideas (such as an open card network) seem completely
impractical.

Anyway Johann said it very elegantly. On one side you have people like
Ballmer. On the other side... Richard Stallman and Joebert   :-)

I believe everyone acknowledges Richard Stallman's contributions,
although I believe everyone also believes he's an annoying guy
sometimes (GNU/Linux, give it a rest..) So there will always be people
who would insist on a certain approach on religious grounds.

I'd like to believe I'm somewhere in between these two extremes
(although I used to be very religious about Free... I guess as you get
older and work with more people...)


On Sat, Mar 28, 2009 at 8:22 AM, Ariz Jacinto <[email protected]> wrote:
> Based on your example below, I understand why companies would want to
> use proprietary software because the available turn key solution[1]
> appeals to them and _not_ because it is a requirement for PCI-DSS[2]
> compliance. Maybe it's not what you really meant but the statement
> could easily be taken out of context.
>
> So just to be clear with the uninitiated, PCI security standard does
> not discriminate against the use of open-source software. Meaning, a
> LAMP-based shopping cart could still connect to various payment
> gateways either directly or via third-party and can still be
> PCI-compliant.
>
> [1] https://www.mastercardpaymentgateway.com/mpgpublic/faq.do#q21
> [2] 
> https://pcisecuritystandards.org/security_standards/download.html?id=pci_dss_v1-2.pdf



-- 
Orlando Andico
+63.2.976.8659 | +63.920.903.0335
_________________________________________________
Philippine Linux Users' Group (PLUG) Mailing List
http://lists.linux.org.ph/mailman/listinfo/plug
Searchable Archives: http://archives.free.net.ph

Reply via email to