1381
What's a company secret you can share now that you no longer work there? (lemmy.world)
submitted 3 years ago by to c/asklemmy@lemmy.world
972 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 100 points 3 years ago* (12 children)

I worked for an online payment company you all know. Many eployees have access to the main DB which holds all transactions and names and everything in clear text. You could basically find out all PII (personal identification information) of any celebrity you wanted given they had anaccount. Address, phone number, credit card and all. If you knew a bit of SQL you could basically find whoever person you wanted and get purchase history and all.

Cant say I didnt use this to find stuff about my exes or various celebrities.

  • permalink
  • fedilink
  • source
  • hideshow 12 child comments
    •
  • [–] 30 points 3 years ago (1 child)

    Address, phone number, credit card and all.

    Oh wow. As someone who used to work in Fintech and who built a PCI-DSS compliant system got it successfully certified, it would be a shame if somebody reported that company for violations that could get them to lose their PCI-DSS certification. I mean, do they just bribe their PCI-DSS auditor to overlook this, or have they just managed to hide this blatant issue so far?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 11 points 3 years ago* (2 children)

    I want this to be paypal. Can you expose this publicly and make this company bankrupt + closed by justice?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 9 points 3 years ago

    The moment I got my CC I knew everything that I bought with it would be basically public. I also knew that one day my information would be sold by the data brokers. I've settled with the first fact but I am trying to stop the second one from happening. You guys have any advice? I'm a bit worried that the data removal companies will store info and upload them again so I will keep paying for their services. I have considered doing it myself but it' hella time consuming.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 2 years ago (2 children)

    Please name the company?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •