News for hackers. Stuff that matters.
Re:How Humble Bundle stops online fraud by jeff18 on Friday July 22, 2016 @07:14PM (#12147449)
Humble founder here.

Bitcoin would be a great topic for another blog post, we have a really long love-hate relationship with it. Don't worry, Bitcoin support will hopefully return to our store and gaming bundles eventually. We know what we need to do to turn it back on (more or less, hook it into our SMS verification system) but we have many higher priority tasks work on. We are hiring if you know anyone: https://jobs.humblebundle.com/careers/ :)

While bitcoin is great for preventing chargebacks, it is inherently anonymous. That is good for certain use cases, but when you are trying to enforce a strict per customer limit, it is a nightmare. We invested a lot of resources into doing what we can to combat it, but eventually we figured that we had more important things to do and had to tap out. Almost 100% of the bitcoin traffic was bad actors, and even so it was such a tiny fraction of our sales, like under 0.05%.

There are a lot of diehard bitcoin users, like yourself, and I would love to support your preferred payment method again, but it is an incredible amount of work to do safely.

Re:How Humble Bundle stops online fraud by akavel on Friday July 22, 2016 @07:19PM (#12147471)
Curious how do you know they were bad actors, given the anonymity? Were those some known stolen bitcoin wallets or something? Sorry if the answer is obvious, I'm not a bitcoin user.
Re:How Humble Bundle stops online fraud by jeff18 on Friday July 22, 2016 @07:30PM (#12147533)
Good bitcoin purchases:

  $22 [email protected]
  [30 minutes later]
  $50 [email protected]
  [30 minutes later]
  $15 [email protected]
  etc.
Bad bitcoin purchases:

  $1.00 [email protected] [1 second later]
  $1.00 [email protected] [1 second later]
  $1.00 [email protected] [1 second later]
  $1.00 [email protected] [1 second later]
  $1.00 [email protected] [1 second later]
  etc.
(queue removal of bitcoin)
Re:How Humble Bundle stops online fraud by ThatPlayer on Friday July 22, 2016 @08:04PM (#12147648)
Have you considered allowing them if you have a valid credit card on file. For example, I'm currently a Humble Monthly subscriber which already gives me a one click purchase options through the credit card on file.

Vultr, a VPS Host, accepts Bitcoins but started to require a valid credit card or Paypal purchase before accepting Bitcoins to prevent ToS violators who used Bitcoin.

Re:How Humble Bundle stops online fraud by kevindong on Friday July 22, 2016 @09:11PM (#12147878)
But would that not defeat the purpose of Bitcoin (don't need to interact with the massive financial institutions, anonymity, etc.)?
Re:How Humble Bundle stops online fraud by samb1729 on Friday July 22, 2016 @09:41PM (#12147957)
It's not necessarily the case that someone would want to use Bitcoin for anonymity, it might just be a more convenient payment method or something else. Doesn't hurt to give people more places to spend their Bitcoin even if the circumstances are less than ideal.
Re:How Humble Bundle stops online fraud by kevindong on Friday July 22, 2016 @09:52PM (#12147983)
In what way can Bitcoin be considered a meaningful alternative (however you define it) if you also have to input a valid credit card number (that, presumably, the merchant will run the traditional $1 verification charge on)?

The reality is that Bitcoin is less convenient than using a regular credit card (because, realistically, you're not going to be mining Bitcoin but rather you'll be buying Bitcoin using your regular credit card/bank account). I would argue that Bitcoin is also worse in every way (no chargebacks, wild fluctuations in the valuation of a unit of Bitcoin, etc.) if you also don't care about anonymity and the product you're buying is fully legal.

Re:How Humble Bundle stops online fraud by rtpg on Saturday July 23, 2016 @12:26AM (#12148333)
CC serves as verification. Bitcoin has less fees.

So it's like "providing an ID", and then paying. Even if bitcoin is not "anonymous" (pseudonymous), there's still the decentralised+cheap nature of it that's worthwhile.

Re:How Humble Bundle stops online fraud by traviscj on Saturday July 23, 2016 @02:04AM (#12148551)
Fees argument doesn't really hold water because authorizations costs money too, even if subsequently voided.
Re:How Humble Bundle stops online fraud by ryan-c on Friday July 22, 2016 @08:32PM (#12147748)
Sad to see it go - I've used it to pay for humble bundles a couple of times.
Re:How Humble Bundle stops online fraud by gggggg11111 on Saturday July 23, 2016 @07:12AM (#12149142)
Yeh they lost a customer there, anyways can buy from Steam now direct with bitcoin most of time there are great offers there too.

edit: oh look downvoted for speaking my mind, go HN groupjerk

Re:How Humble Bundle stops online fraud by akavel on Friday July 22, 2016 @08:28PM (#12147740)
Ok, I think I understand - that you mean some more general money laundering of bitcoin? where source of the money need not be known, because behavior shows that it just has to be money laundering. Tx!
Re:How Humble Bundle stops online fraud by jsprogrammer on Friday July 22, 2016 @08:46PM (#12147792)
How exactly does the laundering happen in this scheme? Isn't the money just being sent to Humble, never to return to the person who sent it?
Re:How Humble Bundle stops online fraud by TylerE on Friday July 22, 2016 @09:41PM (#12147955)
The keys get sold on sketchy scam websites like G2A
Re:How Humble Bundle stops online fraud by chii on Friday July 22, 2016 @11:38PM (#12148226)
shouldn't/couldn't the publisher who own the key then just deactivate the key if the source of the money is found to be a laundered source?
Re:How Humble Bundle stops online fraud by sliverstorm on Saturday July 23, 2016 @01:58AM (#12148540)
I imagine they'd rather avoid the whole mess entirely
Re:How Humble Bundle stops online fraud by Jarwain on Saturday July 23, 2016 @05:06AM (#12148890)
Sender gets game keys from Humble and resells the keys for profit.
Re:How Humble Bundle stops online fraud by crishoj on Friday July 22, 2016 @09:05PM (#12147861)
The flow of money doesn't terminate at Humble.
Re:How Humble Bundle stops online fraud by jsprogrammer on Friday July 22, 2016 @09:46PM (#12147965)
Wouldn't Humble need to be in on the laundering then? Or are the launderers able to be in cahoots with the publisher of games?
Re:How Humble Bundle stops online fraud by nathancahill on Friday July 22, 2016 @07:24PM (#12147503)
Typically "bad actors" in this situation are bad in regards to the company, it's not a definition of their person or the source of their money (although those often coincide).
Re:How Humble Bundle stops online fraud by luchs on Friday July 22, 2016 @07:28PM (#12147522)
I'd guess that they track keys which appear on reseller sites. So the "bad actor" comes from later use, not from e.g. stolen Bitcoins.
Re:How Humble Bundle stops online fraud by ploxiln on Friday July 22, 2016 @09:55PM (#12147994)
ahhhh ... it's because of the "name your own price" model and offering of steam keys.

You want to limit to one super-cheap steam-key per person. So that's more of a "promotion" than a classic exchange. Corner case ;)

Re:How Humble Bundle stops online fraud by al_chemist on Saturday July 23, 2016 @09:57AM (#12149463)
"Name your own price" and "Humble" in the name are just marketing gimmicks. It's just a business like any other - they want you to be generous, pay more than other people. If you take "name your own price" honestly, they try to block you. Under $1? "Sorry, minimal name your own price is $1." Paying under average price? "Sorry, please try our captcha roulette or increase your 'name your price'". I can't believe they don't require scan of passport and utility bills to "assure better quality of service".
Re:How Humble Bundle stops online fraud by blhack on Friday July 22, 2016 @10:15PM (#12148047)
The bitcoin die-hards will lynch me for saying this, but: I think this is a good example of where using a side-agreement (sortof a sidechain, I guess?) would be a good thing.

So: don't accept bitcoin payments, accept coinbase payments, but only one per coinbase account.

Re:How Humble Bundle stops online fraud by StavrosK on Saturday July 23, 2016 @10:09AM (#12149492)
I'd be happy to verify my phone number if it meant I could buy anything with Bitcoin afterwards. There are other payment solutions that work, too, I just really really like the UX of Bitcoin and the fact that it's pretty much cash. I don't need permission from my bank to transact.
Re:How Humble Bundle stops online fraud by Datguysteven on Saturday July 23, 2016 @01:52AM (#12148530)
Have you used websites that detect proxy & bad ips like getipintel.net? I'm curious if there's a correlation between abuse and proxy ips.