Comments on: Hash or Crypt…Hash or Crypt? http://jes.blogs.shellprompt.net/2007/03/30/hash-or-crypthash-or-crypt/ My meandering thoughts about Oracle, Application Express and life in general Thu, 20 Nov 2008 10:18:06 +0000 http://wordpress.org/?v=2.5.1 By: Mike Long http://jes.blogs.shellprompt.net/2007/03/30/hash-or-crypthash-or-crypt/#comment-17311 Mike Long Fri, 11 May 2007 14:23:34 +0000 http://jes.blogs.shellprompt.net/2007/03/30/hash-or-crypthash-or-crypt/#comment-17311 The problem with them storing it is two fold. The third party network processess the payment but the third party is NOT responsable for disputes. If someone disputes a charge then it would go back to the retailer. Now this would not explain why they need it for more then 5 to 7 years but Tax issues would and audit issues would. The Dem's in office here in the US have stated that they want to track every creidt card purchase ( in thinking that they can find more money people are earning ). If this goes through then you will find many institutions saving CC data for 7 years or more. And again, the third party would not be responsable for this, the retailer would... (and ofr audits is responsable... The problem with them storing it is two fold. The third party network processess the payment but the third party is NOT responsable for disputes. If someone disputes a charge then it would go back to the retailer. Now this would not explain why they need it for more then 5 to 7 years but Tax issues would and audit issues would.

The Dem’s in office here in the US have stated that they want to track every creidt card purchase ( in thinking that they can find more money people are earning ). If this goes through then you will find many institutions saving CC data for 7 years or more.

And again, the third party would not be responsable for this, the retailer would… (and ofr audits is responsable…

]]> By: Franco http://jes.blogs.shellprompt.net/2007/03/30/hash-or-crypthash-or-crypt/#comment-11602 Franco Fri, 30 Mar 2007 11:39:10 +0000 http://jes.blogs.shellprompt.net/2007/03/30/hash-or-crypthash-or-crypt/#comment-11602 You can beat it to death, it will always be somebody that thinks that's better to encrypt.... :-( But thanks for this flag on security! And fortunately you're not alone ;-) http://asktom.oracle.com/pls/asktom/f?p=100:11:0::::P11_QUESTION_ID:95412348059 You can beat it to death, it will always be somebody that thinks that’s better to encrypt…. :-(
But thanks for this flag on security! And fortunately you’re not alone ;-)
http://asktom.oracle.com/pls/asktom/f?p=100:11:0::::P11_QUESTION_ID:95412348059

]]>