Forgotten Apps Pose PCI Danger, Visa List Shows
Written by Evan SchumanJune 10th, 2010
Tucked away in forgotten corners of your network sits a wide range of old, forlorn applications. Beyond collecting electronic cobwebs, these apps potentially pose one of the most serious threats to your data security.
Visa routinely compiles a list of applications that, it believes, store sensitive authentication data after a payment has been authorized. Many app versions on this "Bad Apps" list are outdated and no longer being sold. But that doesn't mean they are not lying around in hidden corners of quite a few major—and some not-so-major—retail chains.
This Story Is Only Available For Premium Subscribers. Click Or Login In Below To Read The Rest Of This Story.
Already a Subscriber? Login Here
2 Comments | Read Forgotten Apps Pose PCI Danger, Visa List Shows
Leave a Reply
Readers, specifically those who want to comment on a story:
Our Comment SPAM system is getting very aggressive these days and has been blocking legitimate comments. If you post a comment and don't see it appear within 2 hours or so, can you please send a heads-up to customer-service@storefrontbacktalk? Ideally, please include the time you posted the comment. That will allow us to try and hunt for it. Thanks! P.S. We're working on fixing the system, but we don't want to lose any valuable comments in the meantime.
Our Comment SPAM system is getting very aggressive these days and has been blocking legitimate comments. If you post a comment and don't see it appear within 2 hours or so, can you please send a heads-up to customer-service@storefrontbacktalk? Ideally, please include the time you posted the comment. That will allow us to try and hunt for it. Thanks! P.S. We're working on fixing the system, but we don't want to lose any valuable comments in the meantime.
-Ed
June 10th, 2010 at 11:43 am
I have no idea the reason Visa or PCI SSC does not publicly post this list. I have two guesses: 1) legal reasons — Visa is affraid they’ll be sued for libel? or 2) security reasons like you mentioned — but hackers have a better network for distributing this information and most likely already know these vulnerable apps and many more.
*The asterisks next to the various Micros versions indicate that there are secure third party drivers that can bring them into compliance.
July 1st, 2010 at 7:08 pm
It’s logical not to publish the list, although I would personally benefit from its publication.
Two of my competitors are on the list, but the systems listed are very old. Many consumers would look at the brand name and just reject them as potential choices to be on the safe side. VISA doesn’t want it list to be a kiss of death for an established brand.