On Tue, 1 Sep 2009 11:29:00 -0400 "C. Ardillo" <[email protected]> wrote:
:>"Do they have a way to specify the expression needed to determine if a random :>number is a possible CC number?" :>See: :>http://barcodingworks.com/?document_srl=986 My question applied to "File-Aid, IBM File Manager, et al". If not, all data is a possible binary form of a credit card number. :>Binyamin Dissen wrote: :>>On Tue, 1 Sep 2009 08:21:00 -0500 "Chase, John" <[email protected]> wrote: :>>:>> -----Original Message----- :>>:>> From: IBM Mainframe Discussion List On Behalf Of Doc Farmer :>>:>> Okay, this one came to me yesterday. Somebody asked me if there were :>>:>a way :>>:>> to search all files on a mainframe for credit card number information :>>:>(you :>>:>> know, the 16-digit jobs) for a PCI audit. :>>:>> I know, I know, it could be 16 Alphanumeric, 16 Numeric, 9 Packed :>>:>Decimal, :>>:>> or 8 Binary. I also know it would require searching EVERY file, and :>>:>would :>>:>> probably need to use "test" card numbers in order to determine if they :>>:>> really exist. :>>:>> However, for some reason they want to know if a scanner is available. :>>:>I'm :>>:>> figuring this could be done with ISPF's SuperC, or with CA-Easytrieve :>>:>or :>>:>> CA-PanAudit, but if anybody knows of a PCI scanner for z/OS, I'd :>>:>appreciate :>>:>> some names/links. Many thanks. :>>:>In the most general sense, a utility like File-Aid, IBM File Manager, et :>>:>al could be considered such a "scanner". One should probably include :>>:>such CBTTAPE utilities as DEBE. :>>Do they have a way to specify the expression needed to determine if a random :>>number is a possible CC number? :>>:>I suppose "they" also would want uncataloged datasets, z/OS UNIX files, :>>:>tapes, etc. included in the potential universe. :>>:>It might be "interesting" to see how one might detect and handle false :>>:>positives from such a scan.... :>>Yes. -- Binyamin Dissen <[email protected]> http://www.dissensoftware.com Director, Dissen Software, Bar & Grill - Israel Should you use the mailblocks package and expect a response from me, you should preauthorize the dissensoftware.com domain. I very rarely bother responding to challenge/response systems, especially those from irresponsible companies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
