He doesn't know, and can't know, everyone commenting to HN. At best hes fabricating. I was going to top post that but checked first to see if anyone had surfaced that line.
The auditor is an idiot and feels cornered.
Also: "I'm going to assume you do not have PCI installed on your servers".
PCI is an auditing standard. Not something "you have installed on your servers".
And I guess I'm getting too far ahead of myself, because the OP comments on this in his serverfault posting.
Classic! "PCI SSC have responded and are investigating him and the company. "
He doesn't know, and can't know, everyone commenting to HN. At best hes fabricating. I was going to top post that but checked first to see if anyone had surfaced that line.
The auditor is an idiot and feels cornered.
Also: "I'm going to assume you do not have PCI installed on your servers".
PCI is an auditing standard. Not something "you have installed on your servers".
And I guess I'm getting too far ahead of myself, because the OP comments on this in his serverfault posting.
Classic! "PCI SSC have responded and are investigating him and the company. "
I'd say samarudge did a bang-on job here.