ElginEudor

no profile record

comments

It's called PCI. Taking payment information in the context of the twitter.com same origin would pull Twitter into PCI compliance scope for Ribbon & possibly impact Twitters own PCI compliance state. For this to happen there would need to be contracts in place.

ElginEudor

13 anni fadiscuss

It's called PCI. Unless there was a contract between Ribbon & Twitter this is not at all okay since they were taking payments within the same origin of twitter.com, thus bringing twitter.com into scope of PCI compliance for Ribbon. This was a really basic mistake if there was no contract. Everyone who knows anything about PCI understands this very well.