text:
Payment Card Industry Data Security Standard
From Wikipedia, the free encyclopedia
Jump to: navigation, search
This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. (October 2017) (Learn how and when to remove this template message)
The Payment Card Industry Data Security Standard (PCI DSS) is an information security standard for organizations that handle branded credit cards from the major card schemes.
The PCI Standard is mandated by the card brands and administered by the Payment Card Industry Security Standards Council. The standard was created to increase controls around cardholder data to reduce credit card fraud. Validation of compliance is performed annually, either by an external Qualified Security Assessor (QSA) or by a firm specific Internal Security Assessor that creates a Report on Compliance for organizations handling large volumes of transactions, or by Self-Assessment Questionnaire (SAQ) for companies handling smaller volumes.
Contents
[hide]
1 History
2 Requirements
3 Updates and supplemental information
4 Validation Compliance
4.1 Qualified Security Assessor (QSA)
4.2 Report on Compliance (ROC)
4.3 Self-Assessment Questionnaire (SAQ)
5 Compliance versus validation of compliance
6 Mandated compliance
7 Compliance and wireless LANs
7.1 Wireless LAN and CDE classification
7.2 Secure deployment requirements for wireless LANs
7.3 Minimum scanning requirements for wireless LAN
8 PCI compliance in call centers
9 Controversies and criticisms
9.1 Compliance and compromises
9.2 Compliance as a snapshot
10 See also
11 References
12 Books on PCI DSS
13 External links
History[edit]
Five different programs: Visa's Cardholder Information Security Program, MasterCard's Site Data Protection, American Express's Data Security Operating Policy, Discover's Information Security and Compliance, and the JCB's Data Security Program were started by card companies. The intentions of each were roughly similar: to create an additional level of protection for card issuers by ensuring that merchants meet minimum levels of security when they store, process and transmit cardholder data.
The Payment Card Industry Security Standards Council (PCI SSC) was then formed and these companies aligned their individual policies to create the PCI DSS.
There have been a number of versions:
1.0 was released on December 15, 2004.
1.1 in September 2006 provide clarification and minor revisions.
1.2 was released on October 1, 2008. It enhanced clarity, improved flexibility, and addressed evolving risks and threats.
1.2.1 in August 2009 made minor corrections designed to create more clarity and consistency among the standards and supporting documents.
2.0 was released in October 2010.
3.0 was released in November 2013 and was active from January 1, 2014 to June 31, 2015.
3.1 was released in April 2015, and has been retired since October 31 2016.
3.2 was released in April 2016.
Requirements[edit]
The PCI Data Security Standard specifies twelve requirements for compliance, organized into six logically related groups called "control objectives".
Each version of PCI DSS has divided these twelve requirements into a number of sub-requirements differently, but the twelve high-level requirements have not changed since the inception of the standard.
Updates and supplemental information[edit]
The PCI SSC has released several supplemental pieces of information to clarify various requirements. These documents include the following
Information Supplement: Requirement 11.3 Penetration Testing
Information Supplement: Requirement 6.6 Code Reviews and Application Firewalls Clarified
Navigating the PCI DSS - Understanding the Intent of the Requirements
Information Supplement: PCI DSS Wireless Guidelines
Validation Compliance[edit]
Qualified Security Assessor (QSA)[edit]
Main article: Qualified Security Assessor
A Qualified Security Assessor is a certificate that has been provided by the PCI Security Standards Council. This Certified person can audit merchants for Payment Card Industry Data Security Standard (PCI DSS) compliance.
Report on Compliance (ROC)[edit]
A Report on Compliance is a form that has to be filled by all level 1 merchants Visa merchants undergoing a PCI DSS (Payment Card Industry Data Security Standard) audit. The ROC form is used to verify that the merchant being audited is compliant with the PCI DSS standard.
Self-Assessment Questionnaire (SAQ)[edit]
The Self-Assessment Questionnaire is a set of Questionnaires documents that merchants are required to complete each and every year and submit to their transaction Bank.
Compliance versus validation of compliance[edit]
Although the PCI DSS must be implemented by all entities that process, store or transmit cardholder data, formal validation of PCI DSS compliance is not mandatory for all entities. Currently both Visa and MasterCard require merchants and service providers to be validated according to the PCI DSS. Visa also offers an alternative program called the Technology Innovation Program (TIP) that allows qualified merchants to discontinue the annual PCI DSS validation assessment. These merchants are eligible if they are taking alternative precautions against counterfeit fraud such as the use of EMV or Point to Point Encryption.
Issuing banks are not required to go through PCI DSS validation although they still have to secure the sensitive data in a PCI DSS compliant manner. Acquiring banks are required to comply with PCI DSS as well as to have their compliance validated by means of an audit.
In the event of a security breach, any compromised entity which was not PCI DSS compliant at the time of breach will be subject to additional card scheme penalties, such as fines.
Mandated compliance[edit]
Compliance with PCI DSS is not required by federal law in the United States. However, the laws of some U.S. states either refer to PCI DSS directly, or make equivalent provisions.
In 2007, Minnesota enacted a law prohibiting the retention of payment card data.
In 2009, Nevada incorporated the standard into state law, requiring compliance of merchants doing business in that state with the current PCI DSS, and shields compliant entities from liability.
In 2010, Washington also incorporated the standard into state law. Unlike Nevada's law, entities are not required to be compliant to PCI DSS, but compliant entities are shielded from liability in the event of a data breach.
Compliance and wireless LANs[edit]
In July 2009, the Payment Card Industry Security Standards Council published wireless guidelines for PCI DSS recommending the use of wireless intrusion prevention system (WIPS) to automate wireless scanning for large organizations. Wireless guidelines clearly define how wireless security applies to PCI DSS 1.2 compliance.
These guidelines apply to the deployment of wireless LAN (WLAN) in Cardholder Data Environments, also known as CDEs. A CDE is defined as a network environment that stores, processes or transmits credit card data.
Wireless LAN and CDE classification[edit]
PCI DSS wireless guidelines classify CDEs into three scenarios depending on how wireless LANs are deployed.
No known WLAN AP inside or outside the CDE: The organization has not deployed any WLAN AP. In this scenario, three minimum scanning requirements (Sections 11.1, 11.4 and 12.9) of the PCI DSS apply.
Known WLAN AP outside the CDE: The organization has deployed WLAN APs outside the CDE. These WLAN APs are segmented from the CDE by a firewall. There are no known WLAN APs inside the CDE. In this scenario, three minimum scanning requirements (Sections 11.1, 11.4 and 12.9) of the PCI DSS apply.
Known WLAN AP inside the CDE: The organization has deployed WLAN APs inside the CDE. In this scenario, three minimum scanning requirements (Sections 11.1, 11.4 and 12.9), as well as six secure deployment requirements (Sections 2.1.1, 4.1.1, 9.1.3, 10.5.4, 10.6 and 12.3) of the PCI DSS apply.
Key sections of PCI DSS 1.2 that are relevant for wireless security are classified and defined below.
Secure deployment requirements for wireless LANs[edit]
These secure deployment requirements apply to only those organizations that have a known WLAN AP inside the CDE. The purpose of these requirements is to deploy WLAN APs with proper safeguards.
Section 2.1.1 Change Defaults: Change default passwords, SSIDs on wireless devices. Enable WPA or WPA2 security.
Section 4.1.1 802.11i Security: Set up APs in WPA or WPA2 mode with 802.1X authentication and AES encryption. Use of WEP in CDE is not allowed after June 30, 2010.
Section 9.1.3 Physical Security: Restrict physical access to known wireless devices.
Section 10.5.4 Wireless Logs: Archive wireless access centrally using a WIPS for 1 year.
Section 10.6 Log Review: Review wireless access logs daily.
Section 12.3 Usage Policies: Develop usage policies to list all wireless devices regularly. Develop usage possible for the use of wireless devices.
Minimum scanning requirements for wireless LAN[edit]
These minimum scanning requirements apply to all organizations regardless of the type of wireless LAN deployment in the CDE. The purpose of these requirements is to eliminate any rogue or unauthorized WLAN activity inside the CDE.
Section 11.1 Quarterly Wireless Scan: Scan all sites with CDEs whether or not they have known WLAN APs in the CDE. Sampling of sites is not allowed. A WIPS is recommended for large organizations since it is not possible to manually scan or conduct a walk-around wireless security audit of all sites on a quarterly basis
Section 11.4 Monitor Alerts: Enable automatic WIPS alerts to instantly notify personnel of rogue devices and unauthorized wireless connections into the CDE.
Sectional 12.9 Eliminate Threats: Prepare an incident response plan to monitor and respond to alerts from the WIPS. Enable automatic containment mechanism on WIPS to block rogues and unauthorized wireless connections.
PCI compliance in call centers[edit]
This article's tone or style may not reflect the encyclopedic tone used on Wikipedia. See Wikipedia's guide to writing better articles for suggestions. (July 2016) (Learn how and when to remove this template message)
While the PCI DSS standards are very explicit about the requirements for the back end storage and access of CHD (Card Holder Data), the Payment Card Industry Security Standards Council has said very little about the collection of that information on the front end, whether through websites, interactive voice response systems or call center agents. This is surprising, given the high threat potential for credit card fraud and data compromise that call centers pose.
In a call center, customers read their credit card information, CVV codes, and expiration dates to call center agents. There are few controls which prevent the agent from skimming (credit card fraud) this information with a recording device or a computer or physical note pad. Moreover, almost all call centers deploy some kind of call recording software, which is capturing and storing all of this sensitive consumer data. These recordings are accessible by a host of call center personnel, are often unencrypted, and generally do not fall under the PCI DSS standards outlined here. Home-based telephone agents pose an additional level of challenges, requiring the company to secure the channel from the home-based agent through the call center hub to the retailer applications.
To address some of these concerns, on 18 March 2011 the Payment Card Industry Security Standards Council issued a revised FAQ about call center recordings. The bottom line is that companies can no longer store digital recordings that include sensitive card data if those recordings can be queried.
Technology solutions can also completely prevent skimming (credit card fraud) by agents. At the point in the transaction where the agent needs to collect the credit card information, the call can be transferred to an Interactive Voice Response system. This protects the sensitive information, but can create an awkward customer interaction. Solutions such as agent-assisted automation allow the agent to capture the credit card information without ever seeing or hearing it. The agent remains on the phone and customers enter their credit card information directly into the customer relationship management software using the keypad of their phone. Agent-assisted automation can stumble however if callers read back the digits as they enter them. DTMF tones are suppressed entirely or converted to monotones so the agent cannot recognize them and so that they cannot be recorded. Some secure payment platforms allows for the masking of the DTMF tones, but are still recorded as DTMF tones by the on-site or hosted call recorders. Traditionally the only way to suppress DTMF tones is to intercept the call at the trunk using sophisticated servers and call cards to do so. This way allows for the suppression or masking of the DTMF tones to the call recorder, as well as the agent.
As recently as June 2014, we saw the introduction of cloud based telephony payment solutions hit the market, but still challenges remain with such deployments as calls need to be routed to the cloud platform before they can be executed onwards to the call center. This is done so the cloud server can intercept the call to control the DTMF tones for secure masking or clamping to both the agent and cloud call recorders. If going through the network cloud, no hardware or software needs to be installed in the organization itself, though cloud solutions remain logistic and integration challenging to both service providers and merchants.
The benefits of increasing the security around the collection of personally identifiable information goes beyond credit card fraud to include helping merchants win due to
Controversies and criticisms[edit]
According to Stephen and Theodora "Cissy" McComb, owners of Cisero’s Ristorante and Nightclub in Park City, Utah (which was fined for a breach that two forensics firms could not find evidence even occurred), "the PCI system is less a system for securing customer card data than a system for raking in profits for the card companies via fines and penalties. Visa and MasterCard impose fines on merchants even when there is no fraud loss at all, simply because the fines 'are profitable to them.'"
Additionally, Michael Jones, CIO of Michaels' Stores, testifying before a U.S. Congress subcommittee regarding the PCI DSS, says "(...the PCI DSS requirements...) are very expensive to implement, confusing to comply with, and ultimately subjective, both in their interpretation and in their enforcement. It is often stated that there are only twelve 'Requirements' for PCI compliance. In fact there are over 220 sub-requirements; some of which can place an incredible burden on a retailer and many of which are subject to interpretation."
In contrast, others have suggested that PCI DSS is a step toward making all businesses pay more attention to IT security, even if minimum standards are not enough to completely eradicate security problems.
"Regulation—SOX, HIPAA, GLBA, the credit-card industry's PCI, the various disclosure laws, the European Data Protection Act, whatever—has been the best stick the industry has found to beat companies over the head with. And it works. Regulation forces companies to take security more seriously, and sells more products and services." - Bruce Schneier
Further, per PCI Council General Manager Bob Russo's response to the National Retail Federation: PCI is a structured "blend...[of] specificity and high-level concepts" that allows "stakeholders the opportunity and flexibility to work with Qualified Security Assessors (QSAs) to determine appropriate security controls within their environment that meet the intent of the PCI standards."
Compliance and compromises[edit]
According to Visa Chief Enterprise Risk Officer, Ellen Richey, "...no compromised entity has yet been found to be in compliance with PCI DSS at the time of a breach." In 2008, a breach of Heartland Payment Systems, an organisation validated as compliant with PCI DSS, resulted in the compromising of one hundred million card numbers. Around this same time Hannaford Brothers and TJX Companies, also validated as PCI DSS compliant, were similarly breached as a result of the alleged coordinated efforts of Albert "Segvec" Gonzalez and two unnamed Russian hackers.
Assessments examine the compliance of merchants and services providers with the PCI DSS at a specific point in time and frequently utilize a sampling methodology to allow compliance to be demonstrated through representative systems and processes. It is the responsibility of the merchant and service provider to achieve, demonstrate, and maintain their compliance at all times both throughout the annual validation/assessment cycle and across all systems and processes in their entirety. Though it could be that a breakdown in merchant and service provider compliance with the written standard was to blame for the breaches, Hannaford Brothers had received its PCI DSS compliance validation one day after it had been made aware of a two-month-long compromise of its internal systems. The failure of this to be identified by the assessor suggests that incompetent verification of compliance undermines the security of the standard.
Other criticism lies in that compliance validation is required only for Level 1-3 merchants and may be optional for Level 4 depending on the card brand and acquirer. Visa's compliance validation details for merchants state that level 4 merchants compliance validation requirements are set by the acquirer, Visa level 4 merchants are "Merchants processing less than 20,000 Visa e-commerce transactions annually and all other merchants processing up to 1 million Visa transactions annually". At the same time over 80% of payment card compromises between 2005 and 2007 affected Level 4 merchants; they handle 32% of transactions.
Compliance as a snapshot[edit]
The state of being PCI DSS compliant might appear to have some temporal persistence, at least from a merchant point of view. In contrast, the PCI Standards Council General Manager Bob Russo has indicated that liabilities could change depending on the state of a given organization at the point in time when an actual breach occurs.
Industry best practice for PCI DSS compliance is to continually improve processes to ensure ongoing compliance, rather than treating compliance as a point in time project.

See also[edit]
Penetration test
Vulnerability management
Wireless LAN
Wireless security
References[edit]
Books on PCI DSS[edit]
A Practical Guide to the Payment Card Industry Data Security Standard (PCI DSS) (ISBN 9781604205855)
PCI Compliance: Understand and Implement Effective PCI Data Security Standard Compliance 4th edition (ISBN 9780128015797)
PCI Compliance: The Definitive Guide (ISBN 9781439887400)
External links[edit]
Official PCI Security Standards Council Site
PCI SSC Data Security Standards Overview
PCI Quick Reference Guide v3
The PCI Compliance Report
The Payment Security Report
Retrieved from "https://en.wikipedia.org/w/index.php?title=Payment_Card_Industry_Data_Security_Standard&oldid=804846306"
Categories:
Payment cards
E-commerce
Computer law
Information privacy
Security compliance
Hidden categories:
Articles needing additional references from October 2017
All articles needing additional references
Wikipedia articles needing style editing from July 2016
All articles needing style editing
Navigation menu
Personal tools
Not logged in
Talk
Contributions
Create account
Log in
Namespaces
Article
Talk
Variants
Views
Read
Edit
View history
More
Search
Navigation
Main page
Contents
Featured content
Current events
Random article
Donate to Wikipedia
Wikipedia store
Interaction
Help
About Wikipedia
Community portal
Recent changes
Contact page
Tools
What links here
Related changes
Upload file
Special pages
Permanent link
Page information
Wikidata item
Cite this page
Print/export
Create a book
Download as PDF
Printable version
Languages
Čeština
Deutsch
Español
Français
עברית
日本語
Polski
Русский
Suomi
Svenska
Українська
Edit links
This page was last edited on 11 October 2017, at 14:04.
Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy. Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc., a non-profit organization.
Privacy policy
About Wikipedia
Disclaimers
Contact Wikipedia
Developers
Cookie statement
Mobile view

key: html

type: local

value: div

attrs: id class

values: mw-page-base noprint

values: mw-head-base noprint

attrs: id class style

value: a

attrs: id class lang

values: firstHeading firstHeading en

values: siteSub noprint

values: jump-to-nav mw-jump

value: img

attrs: alt src width height srcset data-file-width data-file-height

attrs: href class

value: td

attrs: href title

value: b

attrs: class href

values: Help:Introduction to referencing with Wiki Markup/1

value: span

value: i

value: small

values: plainlinks metadata ambox ambox-content ambox-Refimprove

values:
/wiki/Visa_(company)
mw-redirect
Visa (company)

values:
/wiki/Japan_Credit_Bureau
mw-redirect
Japan Credit Bureau

values: Edit section: Updates and supplemental information

values: Edit section: Qualified Security Assessor (QSA)

values: Edit section: Report on Compliance (ROC)

values: Edit section: Self-Assessment Questionnaire (SAQ)

values: Edit section: Compliance versus validation of compliance

values: Edit section: Compliance and wireless LANs

values: Edit section: Wireless LAN and CDE classification

values: Edit section: Secure deployment requirements for wireless LANs

values: Edit section: Minimum scanning requirements for wireless LAN

values: Edit section: PCI compliance in call centers

values: plainlinks metadata ambox ambox-style ambox-Tone

values:
/wiki/Call_centers
mw-redirect
Call centers

values:
/wiki/Card_Verification_Value
mw-redirect
Card Verification Value

values:
/wiki/Skimming_(credit_card_fraud)
mw-redirect
Skimming (credit card fraud)

values:
/wiki/Call_recording_software
mw-redirect
Call recording software

values:
/wiki/Interactive_Voice_Response
mw-redirect
Interactive Voice Response

values: Edit section: Controversies and criticisms

values: Edit section: Compliance and compromises

values: -moz-column-width: 30em; -webkit-column-width: 30em; column-width: 30em; list-style-type: decimal;

values:
nofollow
http://www.pcisecuritystandards.org/
external text

values:
nofollow
http://pcidsscompliance.net/
external text

values: Category:Articles needing additional references from October 2017

values: Category:All articles needing additional references

values: Category:Wikipedia articles needing style editing from July 2016

values: Category:All articles needing style editing

values: Discussion about edits from this IP address [ctrl-alt-n]

values: A list of edits made from this IP address [ctrl-alt-y]

values: You are encouraged to create an account and log in; however, it is not mandatory

values: You're encouraged to log in; however, it's not mandatory. [ctrl-alt-o]

values: Discussion about the content page [ctrl-alt-t]

values: p-namespaces navigation vectorTabs p-namespaces-label

values:
p-variants
navigation
vectorMenu emptyPortlet
p-variants-label

values: Past revisions of this page [ctrl-alt-h]

values: p-views navigation vectorTabs p-views-label

values:
p-cactions
navigation
vectorMenu emptyPortlet
p-cactions-label

values:
mw-wiki-logo
/wiki/Main_Page
Visit the main page

values:
/wiki/Main_Page
Visit the main page [ctrl-alt-z]
z

values: Featured content – the best of Wikipedia

values: Find background information on current events

values:
/wiki/Special:Random
Load a random article [ctrl-alt-x]
x

values: A list of all special pages [ctrl-alt-q]

values: Permanent link to this revision of the page

values: Link to connected data repository item [ctrl-alt-g]

values: Printable version of this page [ctrl-alt-p]

values:
https://cs.wikipedia.org/wiki/PCI_DSS
PCI DSS – Czech
cs
cs
interlanguage-link-target

values: Payment Card Industry Data Security Standard – German

values:
https://es.wikipedia.org/wiki/PCI_DSS
PCI DSS – Spanish
es
es
interlanguage-link-target

values: Norme de sécurité de l’industrie des cartes de paiement – French

values: PCIデータセキュリティスタンダード – Japanese

values: Payment Card Industry Data Security Standard – Polish

values:
https://ru.wikipedia.org/wiki/PCI_DSS
PCI DSS – Russian
ru
ru
interlanguage-link-target

values:
https://fi.wikipedia.org/wiki/PCI_DSS
PCI DSS – Finnish
fi
fi
interlanguage-link-target

values: Payment Card Industry Data Security Standard – Swedish

values:
https://uk.wikipedia.org/wiki/PCI_DSS
PCI DSS – Ukrainian
uk
uk
interlanguage-link-target

values: /static/images/wikimedia-button-1.5x.png 1.5x, /static/images/wikimedia-button-2x.png 2x

values: /static/images/poweredby_mediawiki_132x47.png 1.5x, /static/images/poweredby_mediawiki_176x62.png 2x

values:
suggestions
display: none; font-size: 13px;

values: mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-0 ns-subject page-Payment_Card_Industry_Data_Security_Standard rootpage-Payment_Card_Industry_Data_Security_Standard vector-nav-directionality skin-vector action-view


text:
I Only Have Eyes for You
From Wikipedia, the free encyclopedia
Jump to: navigation, search
For other uses, see I Only Have Eyes for You (disambiguation).
This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. (March 2014) (Learn how and when to remove this template message)
"I Only Have Eyes for You" is a popular romantic love song by composer Harry Warren and lyricist Al Dubin, written for the film Dames (1934) where it was introduced by Dick Powell and Ruby Keeler. The song is a jazz standard, and has been covered by numerous musicians. Successful recordings of the song have been made by Ben Selvin (in 1934), The Flamingos (in 1959), The Lettermen (in 1966) and Art Garfunkel (in 1975), among others.
Contents
[hide]
1 Notable recordings
1.1 Charting versions
1.1.1 The Flamingos version
1.1.2 Art Garfunkel version
1.2 Other recordings
2 Live covers
3 Samples
4 In film and television
5 Other uses
6 References
7 External links
Notable recordings[edit]
Charting versions[edit]
The song was a #2 hit for Ben Selvin in 1934.[1] The orchestras of Eddie Duchin and Anson Weeks also figured in the song's 1934 popularity.
The vocal group The Lettermen released a version in 1966 that charted in the United States and Canada, and reached #4 on the US Billboard Easy Listening chart.
The Flamingos version[edit]
"I Only Have Eyes for You"
Single by The Flamingos
from the album Flamingo Serenade
Released
1959
Format
7" single
Genre
Doo-wop
traditional pop
Length
3:20
Label
End
Songwriter(s)
Harry Warren, Al Dubin
This song was included on The Flamingos' debut album Flamingo Serenade. The version by the Flamingos features a prominent reverb effect, creating a dreamy ambience. This version peaked at number 11 on the US Billboard Hot 100 chart[2] and #3 on the Billboard Hot R&B/Hip-Hop Songs chart.[3] It ranked as the 73rd biggest hit of 1959 by Billboard.[4] Rolling Stone magazine ranked the Flamingos' version #157 on their list of the 500 Greatest Songs of All Time.
Art Garfunkel version[edit]
"I Only Have Eyes for You"
Single by Art Garfunkel
from the album Breakaway
B-side
"Looking for the Right One"
Released
August 1975
Genre
Soft rock
Length
3:30
Label
Columbia
Songwriter(s)
Harry Warren, Al Dubin
Producer(s)
Richard Perry
Art Garfunkel singles chronology
"Second Avenue"
(1974) "I Only Have Eyes for You"
(1975) "Break Away"
(1975)
"Second Avenue"
(1974) "I Only Have Eyes for You"
(1975) "Break Away"
(1975)
A recording of the song by Art Garfunkel was a number one hit on the UK Singles Chart in October 1975 for two weeks.[5] The song was his first hit as a solo artist in the UK. In the US, the song reached #18 on the U.S. Billboard Hot 100[6] and #1 on the Billboard Adult Contemporary chart.[7] The B-side of the single release was "Looking for the Right One," a song written and later recorded by Stephen Bishop. Garfunkel performed "I Only Have Eyes for You" on the second episode of Saturday Night Live.
Other recordings[edit]
In addition to the above artists, these notable artists have also covered this song:
Paul Anka
George Benson – Big Boss Band (1990)
Trumpeter Lester Bowie recorded the tune with his Brass Fantasy band as the title track on their 1986 debut album I Only Have Eyes for You
Liane Carroll – Standard Issue (2004)
Mel Carter (1974). Carter's version, released as a non-album single, reached number 39 on the easy-listening chart and number 104 on the Bubbling Under the Hot 100.
June Christy – A Friendly Session, Vol. 2 (1999) with the Johnny Guarnieri Quintet
Rosemary Clooney, featured on commercial for Lipitor.
Holly Cole – Night (2012)
Chris Connor – Double Exposure (1961) with Maynard Ferguson
An a cappella version by The Complexions was mixed with The Flamingos version for the 1993 film A Bronx Tale.
Jamie Cullum
Doris Day – Golden Girl: Columbia Recordings 1944-1966.
Gitane Demone – Love for Sale (1993) and With Love and Dementia – Live in Cannes 1994
Sheena Easton & Stuart Neal - 42nd Street West End cast album (2017)
Billy Eckstine – Mister B. and the Band: The Savoy Sessions
Mark Eitzel of American Music Club released a version in 2002 on his solo CD of covers, Music for Courage and Confidence.
Kurt Elling – 1619 Broadway – The Brill Building Project (2012)
Ella Fitzgerald recorded the song with Nelson Riddle's orchestra on her 1962 Grammy Award-winning Verve release Ella Swings Brightly with Nelson.
The Forester Sisters – I Got a Date.
Grenadine covered this song on their debut album Goya (1992), with Jenny Toomey singing lead.
Billie Holiday – Billie Holiday Sings (1952, re-released in 1956 as Solitude).
Lionel Hampton, at the 1953 Paris shows that were recorded for the Jazz Time Paris series of albums on Vogue. It is also included on the expanded CD re-release.
Deni Hines and James Morrison covered the song on their album The Other Woman
Mick Hucknall – American Soul (2012)
Human Nature – Jukebox (2014)
Al Jolson, featured in the 1949 Columbia movie Jolson Sings Again.
Peggy Lee (1947)
Johnny Maestro & the Brooklyn Bridge – Acappella (1994)
Kevin Max – "Starry Night Surprise" (2015)
Mercury Rev released a cover version in 1998 as an extra track on the "Goddess on a Hiway" - CD single
Carmen McRae – Diva
Melanie C – Stages (2012)
Camila Meza
Bette Midler
North Atlantic Oscillation – Call Signs EP (2009).
Hi-NRG producer/songwriter Bobby Orlando did a dance version with Bonnie Forman in 1984.
Elaine Paige – Love Can Do That (1991).
Rahsaan Patterson – Bleuphoria
Lyn Paul – Late Night (2006)
Rachael Price
Shilpa Ray and Her Happy Hookers
Cliff Richard - Love Songs (1963 EP; also released as a single in Australia)
Ivo Robić - Hit Parade (1959)
Kenny Rogers – Vote for Love (1996)
Timothy B. Schmit as featured in the film Don't Tell Mom the Babysitter's Dead
Marilyn Scott whose version was released in the soundtrack album for the 1988 film Twins.
Dinah Shore
Carly Simon
Frank Sinatra – "It All Depends on You" / "I Only Have Eyes for You" (with The Ken Lane Singers) (1949), Sinatra–Basie (1962)
The Southland, on their debut album Influence of Geography
Rod Stewart
Summer Camp
The Swallows, in 1952
Tashaki Miyaki recorded for Aquarium Drunkard and released by Light in the Attic Records (20160. Featured on Showtime's Ray Donovan (2016) and the popular video game Little Big Planet 3 (2014)
The Temptations, produced by Bill Conti, and featured in the film Happy New Year (1987)
Toni Tennille – Never Let Me Go (1991)
Martina Topley-Bird recorded a version for the Starbucks compilation Sweetheart 2005: Love Songs
Kalil Wilson – Easy to Love (2009).
Zapp
Live covers[edit]
Corinne Bailey Rae: Grec 2010, Festival de Barcelona, Teatre Grec, Barcelona
Nellie McKay in her cabaret show I Want to Live! (2011-2012)
Samples[edit]
Action Bronson sampled the Flamingos version in his song "Thug Love Story 2012" on the mixtape Blue Chips, produced by Party Supplies.
The Field used samples of the song in the title track of the 2007 album From Here We Go Sublime.
The Fugees sampled vocals from The Flamingos' version for the song "Zealots" on their 1996 album The Score.
Daniel Lopatin, under his Oneohtrix Point Never alias, produced a remix of the song that was released in 2014 on Commissions I.
Sweet Valley (music group) sampled the Flamingos version in their song "Motorcycle Renegade" on their second album Eternal Champ.
Daedelus uses an arrangement of sliced samplings from the Flamingos version of this song in the opening to his live performance for Boiler Room in London
In film and television[edit]
The song was sung in the 1935 film The Woman in Red, produced by Warner Bros., starring Barbara Stanwyck and Gene Raymond. It was also used in the 1950 film Tea for Two, sung by Gordon MacRae.
The Flamingos' version was also used in the 1991 movie "Don't Tell Mom the Babysitter's Dead."
The Flamingos' version was included on the soundtracks for the 1972 version of Kenneth Anger's Rabbit's Moon, 1973 film American Graffiti, 1983 films The Right Stuff and Heart Like a Wheel, the 1991 film My Girl, the 1993 Robert De Niro film A Bronx Tale and the 2003 movie Something's Gotta Give starring Jack Nicholson and Diane Keaton. Grace (Nicole Kidman) also sings a portion of the song to Charles (Christopher Eccleston) in the 2001 film The Others. The trailer of The Grudge 2 also briefly features the song. In the 2001 sci-fi movie A.I. Artificial Intelligence, Gigolo Joe, a lover robot, has this song built into him, and he can play it by a tilt of his head. He plays it to seduce women.
On television, it was used as a recurring theme in a Tex Avery-directed Warner Bros. Merrie Melodies cartoon of the same title, in a scene in the 1989 episode of The Wonder Years, "How I'm Spending My Summer Vacation", and in a 1998 episode of Buffy the Vampire Slayer involving two ghosts from the 1950s borrowing its title from the song and features excerpts of it in several scenes. Disney also featured a music video of the song in the special DTV Doggone Valentine set to clips from Lady and the Tramp. Most recently, the song has been used in episodes of the supernatural drama TV series 666 Park Avenue and in 2013 was featured in the series Glee. It was also featured in the Star Trek: Voyager episode "Lifesigns".[8] In 2014 this song appeared in the horror movie Annabelle followed by the alternate history thriller, The Man in the High Castle, in 2016. It was also recently used in the newest season of Ray Donovan covered by Tashaki Miyaki. The version by The Flamingos was featured in Season 2, Episode 4 of Netflix's The Crown in 2017.
Other uses[edit]
The song was included in the 1980 revival of the musical 42nd Street.
This song makes an appearance twice in the game The Darkness 2, when Jackie Estacado dances with his love Jenny.
It is briefly played in the movie Twins (1998 film). In the scene where Arnold Schwarzenegger gets his girl. A 35-minute version of the song alternately featuring Beck, Devendra Banhart, No Age, Tilda Swinton, and other artists formed the audio portion of Doug Aitken's installation Song \ 1 at the Hirshhorn Museum and Sculpture Garden in Washington, D.C. from March 22 to May 20, 2012.
References[edit]
Notes
Jump up ^ Billboard magazine
Jump up ^ "Music: Top 100 - Billboard Hot 100 Chart", Billboard
Jump up ^ "R&B/Hip Hop Songs - Billboard", Billboard
Jump up ^ [1]
Jump up ^ "i+only+have+eyes+for+you | full Official Chart History | Official Charts Company". Officialcharts.com. Retrieved 2016-08-29.
Jump up ^ "Music: Top 100 - Billboard Hot 100 Chart", Billboard
Jump up ^ "Adult Contemporary Chart - Billboard", Billboard
Jump up ^ Star Trek: Voyager Season 2: Ep.19
Sources
The Billboard Book of Top 40 Hits, 6th Edition, 1996
External links[edit]
Lyrics of this song at MetroLyrics ("I Only Have Eyes For You")
Lyrics of this song at MetroLyrics ("Looking for the Right One")
Preceded by
"Ain't No Way to Treat a Lady" by Helen Reddy Billboard Easy Listening Singles number-one single (Art Garfunkel version)
October 11, 1975 Succeeded by
"Something Better to Do" by Olivia Newton-John
Preceded by
"Hold Me Close" by David Essex UK number-one single (Art Garfunkel version)
25 October 1975 (2 weeks) Succeeded by
"Space Oddity" by David Bowie
[hide]
v
t
e
Simon & Garfunkel
Paul Simon
Art Garfunkel
Studio albums
Wednesday Morning, 3 A.M.
Sounds of Silence
Parsley, Sage, Rosemary and Thyme
Bookends
Bridge over Troubled Water
Live albums
The Concert in Central Park
Live from New York City, 1967
Old Friends: Live on Stage
Live 1969
Compilation albums
Simon and Garfunkel's Greatest Hits
Collected Works
The Simon and Garfunkel Collection
20 Greatest Hits
The Definitive Simon and Garfunkel
Old Friends
The Best of Simon and Garfunkel
Two Can Dream Alone
Tales from New York: The Very Best of Simon & Garfunkel
The Columbia Studio Recordings (1964–1970)
Tom & Jerry
The Essential Simon & Garfunkel
The Collection: Simon & Garfunkel
Simon & Garfunkel: The Complete Albums Collection
Soundtrack albums
The Graduate
Videos
The Concert in Central Park
Old Friends: Live on Stage
Discographies
Simon & Garfunkel
Art Garfunkel
Paul Simon
Other
Songs recorded
Paul Simon solo albums
Paul Simon songs
Art Garfunkel solo albums
Bridge over Troubled Water (Paul Desmond album)
Book
Category
Retrieved from "https://en.wikipedia.org/w/index.php?title=I_Only_Have_Eyes_for_You&oldid=828146075"
Categories:
1934 songs
1950 singles
1959 singles
1966 singles
1975 singles
Art Garfunkel songs
The Flamingos songs
The Lettermen songs
Song recordings produced by Richard Perry
Carmen McRae songs
UK Singles Chart number-one singles
Billboard Adult Contemporary number-one singles
Songs with music by Harry Warren
Songs with lyrics by Al Dubin
Hidden categories:
Articles needing additional references from March 2014
All articles needing additional references
Articles with hAudio microformats
Navigation menu
Personal tools
Not logged in
Talk
Contributions
Create account
Log in
Namespaces
Article
Talk
Variants
Views
Read
Edit
View history
More
Search
Navigation
Main page
Contents
Featured content
Current events
Random article
Donate to Wikipedia
Wikipedia store
Interaction
Help
About Wikipedia
Community portal
Recent changes
Contact page
Tools
What links here
Related changes
Upload file
Special pages
Permanent link
Page information
Wikidata item
Cite this page
Print/export
Create a book
Download as PDF
Printable version
Languages
Español
Русский
Edit links
This page was last edited on 28 February 2018, at 20:50.
Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy. Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc., a non-profit organization.
Privacy policy
About Wikipedia
Disclaimers
Contact Wikipedia
Developers
Cookie statement
Mobile view
Enable previews

values: mw-page-base noprint

values: mw-head-base noprint

values: firstHeading firstHeading en

values: siteSub noprint

values: jump-to-nav mw-jump

attrs: href class title

values: I Only Have Eyes for You (disambiguation)

attrs: role class

values:
note
hatnote navigation-not-searchable

values: Help:Introduction to referencing with Wiki Markup/1

values: plainlinks metadata ambox ambox-content ambox-Refimprove

values:
/wiki/Easy_Listening_(chart)
mw-redirect
Easy Listening (chart)

values:
/wiki/Traditional_pop
mw-redirect
Traditional pop

values:
/wiki/500_Greatest_Songs_of_All_Time
mw-redirect
500 Greatest Songs of All Time

values: I Only Have Eyes for You - Art Garfunkel.jpg

values:
/wiki/Looking_for_the_Right_One
mw-redirect
Looking for the Right One

values: width: 33%; text-align: center; vertical-align: top; padding: .2em .1em .2em 0;

values: width: 33%; text-align: center; vertical-align: top; padding:.2em .1em;

values: width: 33%; text-align: center; vertical-align: top; padding: .2em 0 .2em .1em;

values: background: transparent; width: 100%; min-width: 100%; border-collapse: collapse;

values: width:33%; padding:.2em .1em .2em 0; text-align: center;

values: width:33%; padding:.2em .1em; text-align: center;

values: width:33%; padding:.2em 0 .2em .1em; text-align: center;

values:
/wiki/Hot_Adult_Contemporary_Tracks
mw-redirect
Hot Adult Contemporary Tracks

values: I Only Have Eyes for You (Lester Bowie album)

values:
/wiki/Bubbling_Under_the_Hot_100
mw-redirect
Bubbling Under the Hot 100

values:
/wiki/Gitane_Demone
mw-redirect
Gitane Demone

values: 1619 Broadway – The Brill Building Project

values:
/wiki/James_Morrison_(musician)
mw-redirect
James Morrison (musician)

values:
/wiki/American_Soul
mw-redirect
American Soul

values:
/wiki/Love_Can_Do_That_(album)
mw-redirect
Love Can Do That (album)

values:
/wiki/Shilpa_Ray_and_Her_Happy_Hookers
mw-redirect
Shilpa Ray and Her Happy Hookers

values: Sinatra–Basie: An Historic Musical First

values:
/wiki/Summer_Camp
mw-redirect
Summer Camp

values:
/wiki/Little_Big_Planet_3
mw-redirect
Little Big Planet 3

values: Boiler Room in London (page does not exist)

values: I Only Have Eyes for You (Buffy the Vampire Slayer)

values:
/wiki/The_Darkness_2
mw-redirect
The Darkness 2

values:
reflist mw-references-wrap
list-style-type: decimal;

values:
/wiki/List_of_number-one_singles_(UK)
mw-redirect
List of number-one singles (UK)

values:
Simon_&_Garfunkel
fn org
font-size:114%;margin:0 4em

values:
navbox-abovebelow
2
background: #EEEEEE;

values:
row
navbox-group
width:1%;background: #EEEEEE;

values: Collected Works (Simon and Garfunkel album)

values: The Simon and Garfunkel Collection: 17 of Their All-Time Greatest Recordings

values: 20 Greatest Hits (Simon & Garfunkel album)

values: Old Friends (1997 Simon and Garfunkel album)

values: The Columbia Studio Recordings (1964–1970)

values: List of songs recorded by Simon & Garfunkel

attrs: alt src title width height srcset data-file-width data-file-height

values:
navbox-abovebelow hlist
2
background: #EEEEEE;

values: nowraplinks vcard hlist collapsible autocollapse navbox-inner

values: Category:Song recordings produced by Richard Perry

values: Category:UK Singles Chart number-one singles

values: Category:Billboard Adult Contemporary number-one singles

values: Category:Songs with music by Harry Warren

values: Category:Articles needing additional references from March 2014

values: Category:All articles needing additional references

values: Category:Articles with hAudio microformats

values: Discussion about edits from this IP address [ctrl-alt-n]

values: A list of edits made from this IP address [ctrl-alt-y]

values: You are encouraged to create an account and log in; however, it is not mandatory

values: You're encouraged to log in; however, it's not mandatory. [ctrl-alt-o]

values:
/wiki/I_Only_Have_Eyes_for_You
View the content page [ctrl-alt-c]
c

values: Discussion about the content page [ctrl-alt-t]

values: p-namespaces navigation vectorTabs p-namespaces-label

values:
p-variants
navigation
vectorMenu emptyPortlet
p-variants-label

values: Past revisions of this page [ctrl-alt-h]

values: p-views navigation vectorTabs p-views-label

values:
p-cactions
navigation
vectorMenu emptyPortlet
p-cactions-label

values:
mw-wiki-logo
/wiki/Main_Page
Visit the main page

values:
/wiki/Main_Page
Visit the main page [ctrl-alt-z]
z

values: Featured content – the best of Wikipedia

values: Find background information on current events

values:
/wiki/Special:Random
Load a random article [ctrl-alt-x]
x

values: portal navigation p-navigation p-navigation-label

values: Guidance on how to use and edit Wikipedia

values: About the project, what you can do, where to find things

values: A list of recent changes in the wiki [ctrl-alt-r]

values: portal navigation p-interaction p-interaction-label

values: List of all English Wikipedia pages containing links to this page [ctrl-alt-j]

values: Recent changes in pages linked from this page [ctrl-alt-k]

values:
/wiki/Wikipedia:File_Upload_Wizard
Upload files [ctrl-alt-u]
u

values: A list of all special pages [ctrl-alt-q]

values: mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-0 ns-subject page-I_Only_Have_Eyes_for_You rootpage-I_Only_Have_Eyes_for_You skin-vector action-view