Re: [mv] [mv3.14-3] Credit Card Storage?

["Guillermo Ekiel" <ekiel@nexitel.com>]

******    message to minivend-users from "Guillermo Ekiel" <ekiel@nexitel.com>     ******

It depends, a 1 minute search throught the the Minivend manual unearths the
following:

   If you have defined the directive EncryptProgram to be something
containing the value pgp,
   then the CreditCardAuto method will be used to encrypt the
mv_credit_card_number value
   before it is wiped from memory. (Errors in that process will be silently
ignored.) It will
   never be written to the user session, at least by MiniVend itself, so
attempts to recall it on future
   forms will be in vain.

Another one:

   IMPORTANT NOTE: If you are not running with PGP or other encryption for
your credit card
   numbers, which should NEVER be done anyway, then it is important that you
remove the
   mv_credit_card_info field from the database.

Feel free to search the documentation for more details, in particular
anything having to do with the mv_credit_card variables. Look at the sample
catalog for usage examples. The thruth is out there ;) Good luck.



Guillermo Ekiel
Nexitel

----- Original Message -----
From: "Kayo Liles" <kayo@mediafuze.com>
To: <minivend-users@minivend.com>
Sent: Friday, February 11, 2000 10:46 AM
Subject: Re: [mv] [mv3.14-3] Credit Card Storage?


> ******    message to minivend-users from "Kayo Liles" <kayo@mediafuze.com>
******
>
> How about userdb.asc? Aren't the credit card numbers always encrypted,
> though?
>
> Kayo
>
> > ******    message to minivend-users from "frank" <frank@neutral-lax.com>
> ******
> >
> > I'm sorry to ask a stupid question,
> >
> > but does Minivend store Credit Card numbers on the computer that it's
> > running on?
> >
> > I think it's been attacked with Rootkit.
> >
> > Thanks you,
> > Frank
>
> -
> To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
> email with 'UNSUBSCRIBE minivend-users' in the body to
Majordomo@minivend.com.
> Archive of past messages: http://www.minivend.com/minivend/minivend-list
>

-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list