Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.misc > #5049

Re: eHow advise to use Base64 to "encrypt" credit card data

Show all headers | View raw

On 23/09/2014 11:37 AM, invis wrote:
> On 23/09/2014 02:22, Sylvia Else wrote:
>> If there's to be any point in storing the details, there has to be a
>> way of retrieving the plain-text.
>
> True.
>
>> Unless this requires data supplied by the user (for example, their
>> password) that is not retained on the system, then it's just security
>> by obscurity, since if the system can retrieve the plain-text, then
>> so can a hacker.
>
> False.

What's false?
>
> A cracker can intercept any input to the system, so having a
> user-provided password doesn't help.

It rather limits the scope of an attack, since they can only get details 
for those users who connect while the hacker has access. The issue of 
storage is then a bit moot, since if a user is buying something, their 
details will be exposed then anyway.

It's a lot better than a situation where a hacker needs only copy parts 
of a database before disconnecting forever having obtained all the details.

Sylvia.

Back to comp.misc | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

eHow advise to use Base64 to "encrypt" credit card data Rich <rich@example.invalid> - 2014-09-22 11:54 +0000
  Re: eHow advise to use Base64 to "encrypt" credit card data Paul Sture <nospam@sture.ch> - 2014-09-22 14:12 +0200
  Re: eHow advise to use Base64 to "encrypt" credit card data scott@alfter.diespammersdie.us (Scott Alfter) - 2014-09-22 14:32 +0000
  Re: eHow advise to use Base64 to "encrypt" credit card data polygonum <rmoudndgers@vrod.co.uk> - 2014-09-22 18:38 +0100
  Re: eHow advise to use Base64 to "encrypt" credit card data Sylvia Else <sylvia@not.at.this.address> - 2014-09-23 11:22 +1000
    Re: eHow advise to use Base64 to "encrypt" credit card data invis <invis@invis.net> - 2014-09-23 02:37 +0100
      Re: eHow advise to use Base64 to "encrypt" credit card data Sylvia Else <sylvia@not.at.this.address> - 2014-09-23 13:03 +1000

csiph-web