Post #4434683
2026-08-05 18:34 UTC
@pac85@social.treehouse.systems It sounds like a worse version of PCI compliance, where an it technician is certifying that a website is secure enough to take credit cards. The process starts by the site being scanned and then a report being made of everything that could on any way conceivably be used to hack the site.
The one time I did it, I remember having to explain with a straight face that no, it's not possible to hack a site through a referenced image.
Replies (1)
-
@kkarhan@mastodon.social 2026-08-05 20:17
@madengineering@hachyderm.io @pac85@social.treehouse.systems yes, #PCIDSS is just a "checkmark security". The worst part is when you actually get to handling CCs / CVVs & stuff, but that's only relevant to the actual payment processor! - And I worked for one in the past…