News for hackers. Stuff that matters.

A comment on 5900 online stores found skimming. Parent comment

Re:5900 online stores found skimming by technion on Saturday October 15, 2016 @08:02AM (#12713669)
As a low tech experiment, I just grabbed the list that started this thread and tried a few random sites.

I only made it to the third one before I found an http:// checkout page. I tried to change the address to https:// and found it complaining about a cert mismatch. I also viewed source and confirmed the form submits to an http:// address.

So.... yes.

[ Parent | on HN ]
Re:5900 online stores found skimming by Silhouette on Saturday October 15, 2016 @08:59AM (#12713786)
That is genuinely disturbing!

Do some payment services not do at least a basic check of integrations before allowing them to go live? I haven't worked on a site starting out with online payments very recently, but the last time I did, there was a short series of entries in the server logs that did look like someone from the payment service had taken at least a very quick look at the relevant pages.

[ Parent | on HN ]