Re: [OFF] PCI/DSS compliance

2017-09-11 Thread Chip Scheide via 4D_Tech
FREEZE your credit at all credit reporting agencies! > On Sep 8, 2017, at 4:23 PM,Chip Scheide wrote: > >> I find the idea that it is necessary to implement PCI ironic, when >> Equifax just lost the SS numbers, and other personal data of over >> 140,000,000 people. > > I checked the website

Re: [OFF] PCI/DSS compliance

2017-09-08 Thread Paul Ringsmuth via 4D_Tech
Consumer Reports says, "A massive data breach at Equifax compromised sensitive data for nearly half of all U.S. consumers — including names, social security numbers, birth dates, addresses, and the numbers of some driver's licenses. Hundreds of thousands of credit card numbers were also

Re: [OFF] PCI/DSS compliance

2017-09-08 Thread John DeSoi via 4D_Tech
Experian did this as well (on a smaller scale) a few years ago. Same response, "sorry about that, we will give you a year of free credit monitoring". When I looked into what they asked for to sign up for "free" credit monitoring, it just looked like another opportunity to have my data hacked

Re: [OFF] PCI/DSS compliance

2017-09-08 Thread Tim Nevels via 4D_Tech
On Sep 8, 2017, at 4:23 PM,Balinder Walia wrote: > ...and Equifax data breach included credit card numbers too. The credit card companies will have to eat all of this. At least in America, if you report your credit card has been stolen, they will remove any bogus charges. It is a

Re: [OFF] PCI/DSS compliance

2017-09-08 Thread Tim Nevels via 4D_Tech
On Sep 8, 2017, at 4:23 PM,Chip Scheide wrote: > I find the idea that it is necessary to implement PCI ironic, when > Equifax just lost the SS numbers, and other personal data of over > 140,000,000 people. I checked the website they published and it says my information was stolen. So now I

Re: [OFF] PCI/DSS compliance

2017-09-08 Thread Keith Culotta via 4D_Tech
Compliance consisted of answering an online questionnaire and passing the scan. Not storing customer credit card information made a big difference in lowering the "level" of security that we had to meet (Equifax level). It made the questionnaire part much easier to pass. Our cable modem

Re: [OFF] PCI/DSS compliance

2017-09-08 Thread Sannyasin Siddhanathaswami via 4D_Tech
Guess they weren’t PCI compliant… PCI compliance is a huge pain. I highly recommend taking the route of not doing charges in house. It avoids most of the issues. Sannyasin Siddhanathaswami On Sep 8, 2017, 9:17 AM -1000, wrote: I find the idea that it is necessary to implement PCI ironic, when

Re: [OFF] PCI/DSS compliance

2017-09-08 Thread Balinder Walia via 4D_Tech
...and Equifax data breach included credit card numbers too. On Fri, 8 Sep 2017 at 20:17, Chip Scheide via 4D_Tech <4d_tech@lists.4d.com> wrote: > I find the idea that it is necessary to implement PCI ironic, when > Equifax just lost the SS numbers, and other personal data of over > 140,000,000

Re: [OFF] PCI/DSS compliance

2017-09-08 Thread Chip Scheide via 4D_Tech
I find the idea that it is necessary to implement PCI ironic, when Equifax just lost the SS numbers, and other personal data of over 140,000,000 people. On Fri, 8 Sep 2017 11:38:38 -0700, Kirk Brooks via 4D_Tech wrote: > Hi Keith, > I'm just getting back around to this - I like the idea of a

Re: [OFF] PCI/DSS compliance

2017-09-08 Thread Kirk Brooks via 4D_Tech
Hi Keith, I'm just getting back around to this - I like the idea of a VPN. I have three locations I need to accomodate and have to admit I haven't done anything with a VPN so if you'll allow me to ask some pretty naive questions: Did you set up the VPN just within the router or get an actual VPN

Re: [OFF] PCI/DSS compliance

2017-09-07 Thread Keith Culotta via 4D_Tech
Kirk, I can't say that I understand the nuances of the system to the point of having any details to contribute, but after lots of trying to figure it out the thing that finally allowed us to pass the scan was to use a VPN. We open only the VPN ports and the ports required by the credit card