News for hackers. Stuff that matters.

A comment on Didn’t Homejoy Shut Down?.

Re:Didn’t Homejoy Shut Down? by ericsidelis on Wednesday October 28, 2015 @05:55PM (#10467716)
The fact that I can still log in is scaring me, I never signed up for this and nor did I even get an email. My credit card details which are valid are still present.

I find it hard to believe this information was sold and if it was, were they storing credit card info in plain string format. Wouldn't each of those businesses need an encryption key to decrypt secure card numbers. Wonder if they sold that too. Either way props to John for posting this on Medium and of course Aloke on HN.

[ Parent | on HN ]
Re:Didn’t Homejoy Shut Down? by grossvogel on Wednesday October 28, 2015 @06:56PM (#10468005)
Third party processors will store the card info securely and then provide only parts of it back to you via an API call. Stripe's API includes the last 4 and expiration date, as you can see here[1], so Fly Maids may not have all of that data.

[1] https://stripe.com/docs/api#cards

[ Parent | on HN ]