Skip to content

Comment on How I pwned a major New Zealand service providerparent

Comments

They're not supposed to write the details down, which is what this person was referring to.

In Asia, they quite often take your CC details and enter it into a text field in their own system in case they need to process it later, including the CVV. Sometimes they're writing it down on paper.

They're not entering it into a PCI compliant system where the digits are masked.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.