RT @hdmoore: PCI: A Brand, Not a Security Standard - http://attrition.org/security/rants/pci/heartland01.html