News for hackers. Stuff that matters.
Re:Uber employees used the platform to stalk celebrities and... by singlow on Tuesday December 13, 2016 @03:36AM (#13165428)
A new number doesn't necessarily prevent charges from vendors who had the old one. For your convenience the banks actually allow new charges on the old cards after they are cancelled. I assume they whitelist vendors that have good reputations or filter based on patterns of charges against your account which you have not disputed.

Verizon was able to charge against my old account for over a year. I kept getting snail mail letters from my bank telling me that the card I was using had been cancelled and that I needed to update it, but I kind of just wanted to see how long they would let it go.

In other cases, the bank will actually update the vendor with your new card number so that subscriptions are not interrupted.

Re:Uber employees used the platform to stalk celebrities and... by ranman on Tuesday December 13, 2016 @04:39AM (#13165678)
>In other cases, the bank will actually update the vendor with your new card number so that subscriptions are not interrupted.

That's apparently a feature: https://usa.visa.com/dam/VCOM/download/merchants/visa-accoun...

Re:Uber employees used the platform to stalk celebrities and... by cm2187 on Tuesday December 13, 2016 @07:03AM (#13166177)
Even if it is stolen? This thing is massively dangerous. It ensures your credit card details are stored all over the place for them to be leaked or stolen, with no way for the consumer to clean this up.
Re:Uber employees used the platform to stalk celebrities and... by brianwawok on Tuesday December 13, 2016 @07:55AM (#13166418)
In theory they would make sure it was an account you used before the theft.
Re:Uber employees used the platform to stalk celebrities and... by cm2187 on Tuesday December 13, 2016 @08:06AM (#13166466)
Yeah but letting services expire with the credit card unless you still use them is not a bad way to get rid of all the services you subscribed thinking it could be useful but never used.

Reminds me of what was done in the military (I think it was in a European country). Officers were spending their time writing reports that were never read. They introduced a policy under which for a given time everyone should stop writing reports until someone complained that they were not receiving it. And if that didn't happen this type of report would be scrapped.

Re:Uber employees used the platform to stalk celebrities and... by zeven7 on Tuesday December 13, 2016 @09:12AM (#13166852)
Hmm, I feel like in my job I write a lot of things that no one ever reads (issue notes, extra commit information, comments) with the expectation that it'll be helpful information if I or someone else ever does need to look to figure out why I did something.

And it has been helpful. I mean maybe about 1% of it is read later at some point and helps clarify a situation. 99% of it is never seen again. That 1% of the time it's really helpful to have it.

Re:Uber employees used the platform to stalk celebrities and... by bigmofo on Wednesday December 14, 2016 @12:00AM (#13173969)
That is pretty screwed up. So, you have a merchant that is stalking one and they get updated information.

I think I will stick with with the new next gen taxi service where one pays with cash.

Re:Uber employees used the platform to stalk celebrities and... by warcode on Tuesday December 13, 2016 @06:14AM (#13166020)
If you report it as stolen and ask for it to be blocked that will stop all transactions on it.

If it expires or you get a new card in a normal flow it can be charged further.

Re:Uber employees used the platform to stalk celebrities and... by bigmofo on Tuesday December 13, 2016 @11:54PM (#13173943)
I have done this. Yes, they initial did keep the subscription going. However, I told the credit card company that I did not authorized any further; they reversed everthing out. I really wonder whether they give the company the new information or whether they just allow authorization using the old numbers; seems like it is pretty screwed up security if they give the new information to the company.

Also, if you say: - Card was lost. - After reviewing all accounts, it was discovered that the CC information couldn't be deleted from the ubuer UI. - I hereby do not authorized uber to make any charges. - tell them in writing or record the conversation.

I don't see any way uber can make any valid charges against your account (assuming no more action on one's part).

I also wonder whether it follows CC guidelines/rules to keep CC information when the customer has explicitly tried to remove and communicated to the company to remove said information.

Re:Uber employees used the platform to stalk celebrities and... by bogomipz on Tuesday December 13, 2016 @08:47AM (#13166697)
>"For your convenience the banks actually allow new charges on the old cards after they are cancelled."

I have not heard this before. My bank certainly doesn't do this and its a major bank. I actually proactively ask for new cards periodically so that the old ones are no longer valid.

Re:Uber employees used the platform to stalk celebrities and... by jlgaddis on Tuesday December 13, 2016 @07:30PM (#13172722)
Yep, AmEx for example will provide vendors with the new numbers, expiration dates, etc., when your card expires and they issue you a new one.