Skip to the main content.
Contact
Contact

David Gamey

Principal Security Consultant & Researcher at Control Gap Inc.

David Gamey

Principal Security Consultant & Researcher at Control Gap Inc.

4 min read

Don’t Tie Yourself in Knots Thinking you can Store Payment Card Verification Codes/Values

Card Not Present Security Codes/Values are the 3 and 4 digit printed numbers on your payment cards used to verify card-not-present transactions. PCI...

Read More >

8 min read

The DSS, MageCart, and the DOM – Part 3 e-Commerce Skimming

Cyberattacks and data breaches have risen dramatically in recent years and no industry or organization is immune to these attacks. Merchants,...

Read More >

6 min read

The DSS, MageCart, and the DOM – Part 2 Browsers, the DOM, and 3rd Party JavaScript

In part two of our series, we take a deeper dive into how JavaScript works and its implications to web and e-commerce security and compliance. This...

Read More >

8 min read

The DSS, MageCart, and the DOM – Part 1: The PCI DSS e-Commerce Rules

It turns out that how you implement e-commerce can have a huge impact on your compliance footprint (i.e., the number of PCI security controls...

Read More >

5 min read

Why do some Issuers believe they don’t need to be PCI DSS compliant?

Documents from the PCI Council, MasterCard, and Visa clearly indicate that Issuers are required to be PCI DSS compliant (see Learn More below). Yet...

Read More >

6 min read

6 Ways to Deal with the Magnitude of PCI DSS

Are you new to PCI DSS? Perhaps you need to refresh your approach? If so, this article breaks down 6 strategies that will help you eat the proverbial...

Read More >

10 min read

How a $1200 Graphics Card Threatens Your PCI DSS Compliance and Security

Organizations subject to PCI DSS compliance validation spend significant amounts of time, effort, and money to maintain and validate their...

Read More >

2 min read

Another Way 8-Digit Bins Complicate PCI Compliance: It's Not Just Data-at-Rest

The adoption of 8-digit BINs in 2022 has already created many transitional challenges for organizations needing access to the full BIN numbers (see...

Read More >

6 min read

Visa 8-Digit BINs are Just Around the Corner and Many Questions Remain

If your business processes or stores the full-BIN, you need to know if you will be impacted by Visa's Numerics Initiative (i.e., the 8-Digit BIN...

Read More >