News for hackers. Stuff that matters.

A comment on Didn’t Homejoy Shut Down?. Parent comment

Re:Didn’t Homejoy Shut Down? by nacs on Wednesday October 28, 2015 @06:36PM (#10467905)
> has sold Homejoy's user data to Homeaglow

Sold it with credit card numbers attached though?

That sounds awfully.. illegal even for a liquidation.

[ Parent | on HN ]
Re:Didn’t Homejoy Shut Down? by dguaraglia on Wednesday October 28, 2015 @07:33PM (#10468171)
They probably just exported a database of credit card tokens into a PCI-compliant system (Stripe, Braintree or the like.) The motives and method are equally shitty, but at least get some solace in assuming that your credit card number is just not out in the open.

Now... how secure this transfer of tokens was, no idea. So there could be a DB dump somewhere with a token to my credit card, and anyone can use it to start charging from it. I'll keep an eye on my bills.

[ Parent | on HN ]
Re:Didn’t Homejoy Shut Down? by yeukhon on Wednesday October 28, 2015 @06:51PM (#10467970)
See http://www.pcworld.com/article/2901028/radioshack-puts-custo...

Interestingly it has been legal in one case.

[ Parent | on HN ]
Re:Didn’t Homejoy Shut Down? by nacs on Wednesday October 28, 2015 @06:56PM (#10468006)
Not really, FTC didn't like it:

http://money.cnn.com/2015/05/19/news/companies/radioshack-cu...

[ Parent | on HN ]