[Vultra]

Hello all,

This topic is mostly like either wtf or, best way to hide/remove your information. When I go shopping, and I get my receipt.
Due to having your card(CC/DC) information on it, does anyone rip that information out, then either put saliva or close by water source to then rip up the receipt and scrunch into a ball, then toss it away?
or, take it home then just burn it.

Would like to hear personal thoughts and, what you usually do when it comes to stuff like this because, via tossing that valuable information away will leave you vulnerable just because someone can see your last digits of your card.

[mothered]

I securely dispose of every Identifiable Information, the said receipt Inclusive.

Dumpster divers have a lot of time and patience, and an array of Information can be collected when performed correctly. I won't go Into detail, otherwise I'll be here all day. In simple terms, when dumpster diving, If a bag feels heavy and moist, leave It be- It's most likely from the lunch room containing coffee, sandwiches etc. If It feels light and crumpled, It'll predominantly contain paper and that what's taken home for analysis.

Companies also believe shredding sensitive documents takes care of It, but It's not the case at all. Well, not entirely. Always look at the nature of the shredder. If It vertically shreds, It's not good enough. Dumpster divers will sit there all week and put the vertical alignment back together (which Is quite simple). Make sure It also "cross-shreds" In both diagonal and horizontal directions.

[skrtja]

I've started keeping receipts since I was 14. People think I may not want the receipt because I'm younger, but I always request one if they don't give it to me and try to throw it away

[Aeolian]

As mothered stated clearly, you really do need to be aware.

I'm personally working with customers PII every single day, I understand the consequences for being lazy.

[Vultra]

I securely dispose of every Identifiable Information, the said receipt Inclusive.

Dumpster divers have a lot of time and patience, and an array of Information can be collected when performed correctly. I won't go Into detail, otherwise I'll be here all day. In simple terms, when dumpster diving, If a bag feels heavy and moist, leave It be- It's most likely from the lunch room containing coffee, sandwiches etc. If It feels light and crumpled, It'll predominantly contain paper and that what's taken home for analysis.

Companies also believe shredding sensitive documents takes care of It, but It's not the case at all. Well, not entirely. Always look at the nature of the shredder. If It vertically shreds, It's not good enough. Dumpster divers will sit there all week and put the vertical alignment back together (which Is quite simple). Make sure It also "cross-shreds" In both diagonal and horizontal directions.

That's the thing. For example, if you wet a piece of paper and lay it into the sun on cement, it is hard to get off and so, it tears the paper back if an attempted to lift each part.
For them to get what is needed, they would need to go through 2 bags due to throwing half away, so it's impossible to complete the puzzle.

[mothered]

I securely dispose of every Identifiable Information, the said receipt Inclusive.

Dumpster divers have a lot of time and patience, and an array of Information can be collected when performed correctly. I won't go Into detail, otherwise I'll be here all day. In simple terms, when dumpster diving, If a bag feels heavy and moist, leave It be-  It's most likely from the lunch room containing coffee, sandwiches etc. If It feels light and crumpled, It'll predominantly contain paper and that what's taken home for analysis.

Companies also believe shredding sensitive documents takes care of It, but It's not the case at all. Well, not entirely. Always look at the nature of the shredder. If It vertically shreds, It's not good enough. Dumpster divers will sit there all week and put the vertical alignment back together (which Is quite simple). Make sure It also "cross-shreds" In both diagonal and horizontal directions.

That's the thing. For example, if you wet a piece of paper and lay it into the sun on cement, it is hard to get off and so, it tears the paper back if an attempted to lift each part.
For them to get what is needed, they would need to go through 2 bags due to throwing half away, so it's impossible to complete the puzzle.

Agree.

When I perform my pen tests for organizations (those I've worked for and not as a job per se), I need to question assumptions, work around the obvious, seeing what's not (apparently) there and always question a question with a question. A lot of penetration testers focus on the technical side of It, but It expands a lot further than systems and networks.

The entire business must be evaluated. It begins at the external of the building prior to entering, and concludes at the very same point. Everything from security cameras, building entry codes, front door buzzers, alarm systems, entry authentication, printers, scanners, photocopiers, faxes, employee confidentiality, removable device policies, fixed phone lines, caller ID spoofing (Incoming & outgoing), ISP and phone carrier vulnerabilities, social engineering, server and database authentication, password policies, Intrusion Detection and Threat & Intelligence monitoring and the list goes on.

Any vulnerability and/or poor configuration with the above, can subsequently lead to critical data disclosure. This Is about 5% of what I've covered In my security website. You'll see once I provide the link.

[reGEN]

Use cash. or if I'm buying online, I use prepaid cards.

Prevention is better than the cure.

[Vultra]

Use cash.    or if I'm buying online, I use prepaid cards.

Prevention is better than the cure.

Thanks. I'm usually more of a card guy since, I hate carrying cash.

[mothered]

Thanks. I'm usually more of a card guy since, I hate carrying cash.

In terms of a debit card, It's good practice to create two bank accounts with whom you're banking with.

One will serve as a holding account to store your funds, and the other will be your debit card used for purchases. Setup telephone banking (not online for obvious reasons), and every time you wish to make a purchase, transfer the funds Into your card. If your card Is compromised, It will not contain anything.

[Vultra]

Thanks. I'm usually more of a card guy since, I hate carrying cash.

In terms of a debit card, It's good practice to create two bank accounts with whom you're banking with.

One will serve as a holding account to store your funds, and the other will be your debit card used for purchases. Setup telephone banking (not online for obvious reasons), and every time you wish to make a purchase, transfer the funds Into your card. If your card Is compromised, It will not contain anything.

Oh, I sure do have that. The other account is mainly used to add money since, I've got interest coming through monthly. Via adding another account, I may need to ask my bank if it will come to a cost so, all the funds that comes through get moved to my other account so, I can do the method that you suggested BUT, still leaves me vulnerable with the last digits of my card being open. From PP, it only shows 2 digits while a receipt shows 4 :/

Why I'm making this post is, someone managed to use ONLY the last digits of someones CC to gain access to there iTunes account that had money on it. The shitty thing in this world is, fees which are a pain.

Well, you've got me thinking of me taking precautions. It's just the fine line of stuff that I need to take to maneuver my identity.

Where I live, I don't think we do have dumpster divers but, never a good thing to just toss it out thinking you're safe.