Looking at how many sites use vulnerable JavaScript libraries

Re:Looking at how many sites use vulnerable JavaScript libra... by styfle on Wednesday November 22, 2017 @05:21PM (#15761194)

There was a fund raising website written 15 years ago that a team I was on was responsible for (I never actually worked on it).

There were fraudulent credit card donations for $1 which became really obvious when the zip code was garbage.

The “solution” was to disabled the credit card page until the month of the fund raising event when it was enabled again in hopes of the scammers would not try during that month.

[ Parent | on HN ]

Re:Looking at how many sites use vulnerable JavaScript libra... by CapacitorSet on Wednesday November 22, 2017 @07:22PM (#15761838)

I don't understand, what were the scammers trying to achieve?

[ Parent | on HN ]

Re:Looking at how many sites use vulnerable JavaScript libra... by mr_toad on Wednesday November 22, 2017 @07:32PM (#15761900)

Trying to validate stolen or generated credit card numbers.

[ Parent | on HN ]

Re:Looking at how many sites use vulnerable JavaScript libra... by jacquesm on Wednesday November 22, 2017 @08:54PM (#15762221)

That's not always what is going on. In some cases unscrupulous operators will run through large numbers of $1 transactions in order to lower their chargeback rate.

[ Parent | on HN ]

Re:Looking at how many sites use vulnerable JavaScript libra... by nicksantamaria on Thursday November 23, 2017 @05:17AM (#15764137)

This sounds interesting - can you explain further?

[ Parent | on HN ]

Re:Looking at how many sites use vulnerable JavaScript libra... by jacquesm on Thursday November 23, 2017 @05:23AM (#15764152)

Chargebacks have a cap, if you go over that cap you get fined or lose your merchant account. So in order to dilute the pool they'll make a lot of low $ amount charges usually masquerading as some charity, those will have very low charge back rates so the average charge back %age will drop.

[ Parent | on HN ]

Re:Looking at how many sites use vulnerable JavaScript libra... by megaman22 on Wednesday November 22, 2017 @07:26PM (#15761857)

Maybe hoping there was an affirmative response if the card did go through?

[ Parent | on HN ]