https://pcissc.secure.force.com/faq/articles/Frequently_Asked_Question/Are-hashed-Primary-Account-Numbers-PAN-considered-cardholder-data-that-must-be-protected-in-accordance-with-PCI-DSS … In which hashing functions are secure if they do not 'frequently' have collisions (among other horrors).
"maybe use a salt if you feel like it, but if you just want to use plain MD5, yeah, why not"?
-
-
"Hashes are in scope until you move them off the system that created the hash, then you're good"
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.