LOL! Now that's funny right there, Nathan! And actually makes the point I
Was going to about these auditors.
On Wed, Apr 24, 2013 at 11:27 AM, Nathan Andelin <nandelin@xxxxxxxxx> wrote:
You need to go through a PCI audit someday.
You'll change your position very quickly :-)
Nah, PCI auditors are wimps. Try dealing with IT auditors from the DCAA. I
did that for 5 years ;-)
Just tell them that you don't allow ODBC access to your database. That
will confuse them because that eliminates about 95% of known hacks. Then
tell them that you protect your DB with RPG. They will think you're insane
for using rocket propelled grenades, but they'll back off ;-)
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives