[AusNOG] Security for CC details of new signups

[Steve Skeevens]

Hi List,

I've been doing some work on a client's network and I was wondering if their
method of storing credit card numbers of newly registering users was BCP or
not.  Basically, what seems to be happening is the new user's details,
including CC, get stored in a world-readable file in /tmp.  I'm worried that
this might be susceptible to being stolen and posted somewhere by a hacker.
Does this seem well-founded to you or am I just paranoid?

Regards,
Steve
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20100706/4a86e181/attachment.html>