16
What's a company secret you can share now that you no longer work there? (lemmy.world)
submitted 3 years ago by to c/asklemmy@lemmy.world
222 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 3 years ago* (8 children)

I worked for an online payment company you all know. Many eployees have access to the main DB which holds all transactions and names and everything in clear text. You could basically find out all PII (personal identification information) of any celebrity you wanted given they had anaccount. Address, phone number, credit card and all. If you knew a bit of SQL you could basically find whoever person you wanted and get purchase history and all.

Cant say I didnt use this to find stuff about my exes or various celebrities.

  • permalink
  • fedilink
  • source
  • hideshow 8 child comments
    •
  • [–] 1 point 3 years ago (1 child)

    Address, phone number, credit card and all.

    Oh wow. As someone who used to work in Fintech and who built a PCI-DSS compliant system got it successfully certified, it would be a shame if somebody reported that company for violations that could get them to lose their PCI-DSS certification. I mean, do they just bribe their PCI-DSS auditor to overlook this, or have they just managed to hide this blatant issue so far?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 3 years ago* (2 children)

    I want this to be paypal. Can you expose this publicly and make this company bankrupt + closed by justice?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •