Hacker News Reader

Even in the US, I always thought it was illegal to use payment information for anything other than payment processing. Evidently that is not the case.

What is considered cardholder data may surprise you. I’ve implemented many integrations. It’s very specific and requires the primary account number. For example if the PAN is stored separate the name and/or expiration data isn’t considered cardholder data.

For the record storing this information would be folly - can’t lose what you don’t have. Let the payment processor assume the responsibility by storing and handling that if needed.

(PAN = credit card number, for those outside the industry)

I have T-mobile prepaid and my caller ID info pops up as someone else's name. I've called to complain but they claim it's not possible to fix this for prepaid plans. I'm sure it's a massive E911 violation but, you know, computers are hard.

Is it possible that you gave them your info to disable the web content filter, which is forced on unless you give them a bunch of PII?

No, I don't know anything about such a filter, and did not give them any PII.