[TriLUG] Time Warner/spectrum & credit cards

[Mauricio Tavares via TriLUG]

On Thu, Apr 13, 2017 at 6:32 PM, Matt Flyer via TriLUG
<trilug at trilug.org> wrote:
> From what I recall from the TOS agreement, you're not allowed to store enough information such that if it were obtained by a third party (stolen) that it could be used to process a transaction. Specifically, you can't store the CVV code.
>
      I don't think you are *required* to do a CVV check in a card not
present transaction, but as a merchant you are increasing your risk.
Not that PCI Council ever shifts the liability away from the merchant
to begin with. With that said, if you have the second half of the
card, know what card type it is, and have the card owner name,
address, and expiration, you have a good chance of recreating the card
enough to use it.


> Sent from my iPad
>
>> On Apr 13, 2017, at 6:25 PM, Wes Garrison via TriLUG <trilug at trilug.org> wrote:
>>
>> You mean they store the *stripe data*?
>>
>> ...or just the card number?
>>
>> It doesn't violate PCI to store the card number, but you certainly can't
>> store the CSC or the stripe data.
>>
>> If I get a chargeback (dispute), I have to be able to look up which card
>> was used in the transaction.
>>
>> God knows they don't give you any other data.  Just transaction date and
>> amount.
>>
>> _________________________________
>> Wesley S. Garrison
>> Network Engineer
>> Xitech Communications, Inc.
>> phone:  (919) 260-0803
>> fax:       (919) 932-5051
>> __________________________________
>> "Lead us not into temptation, but deliver us from email."
>>
>> On Thu, Apr 13, 2017 at 6:15 PM, Mauricio Tavares via TriLUG <
>> trilug at trilug.org> wrote:
>>
>>> So I just came from paying my cable modem bill at one of the tw locations.
>>> And I found out they store the credit card you used at the counter without
>>> asking. That is a no-no by PCI standards.
>>> --
>>> This message was sent to: Wes <wes at xitechusa.com>
>>> To unsubscribe, send a blank message to trilug-leave at trilug.org from that
>>> address.
>>> TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
>>> Unsubscribe or edit options on the web  : http://www.trilug.org/mailman/
>>> options/trilug/wes%40xitechusa.com
>>> Welcome to TriLUG: http://trilug.org/welcome
>> --
>> This message was sent to: Matt Flyer <matt at noway2.thruhere.net>
>> To unsubscribe, send a blank message to trilug-leave at trilug.org from that address.
>> TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
>> Unsubscribe or edit options on the web    : http://www.trilug.org/mailman/options/trilug/matt%40noway2.thruhere.net
>> Welcome to TriLUG: http://trilug.org/welcome
>
> --
> This message was sent to: raubvogel at gmail.com <raubvogel at gmail.com>
> To unsubscribe, send a blank message to trilug-leave at trilug.org from that address.
> TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
> Unsubscribe or edit options on the web  : http://www.trilug.org/mailman/options/trilug/raubvogel%40gmail.com
> Welcome to TriLUG: http://trilug.org/welcome