News for hackers. Stuff that matters.
Re:Candy Japan 2017 Year in Review by LV-426 on Wednesday December 27, 2017 @03:26AM (#16013600)
Interesting article, and good to know you're still operating despite the problems.

> All those new subscribers beyond the first 800 were actually fakes who had subscribed with stolen credit card numbers [...] a lot of shipping addresses turned out to be fake as well

I don't know if this was already discussed in previous years, but this sounds like a rival (either established or wanting to copy your model).

Edit: https

Re:Candy Japan 2017 Year in Review by bufferoverflow on Wednesday December 27, 2017 @03:46AM (#16013671)
I doubt about rivalry, his business doesn't make that much money, even after years of development and quite successful social media posts (I've heard about it a dozen times).

He needs to expand into other niches. Japan is full of weird things.

Re:Candy Japan 2017 Year in Review by sireat on Wednesday December 27, 2017 @04:42PM (#16018285)
Thing is that even with the limited market he has some 5 serious competitors.

As bemmu readily admits competition is eating into his market.

You name the niche you will see competition no matter how obscure.

Re:Candy Japan 2017 Year in Review by the-dude on Wednesday December 27, 2017 @03:34AM (#16013625)
Small charges on stolen credit cards are usually to test if the card is still valid.

Hence charities are popular to test on too.

Re:Candy Japan 2017 Year in Review by LV-426 on Wednesday December 27, 2017 @03:45AM (#16013667)
Ah, okay, makes sense (in an evil way).

It just sounded like it was a sudden wave after the site had become more popular, but it maybe just appeared on the radar of scammers as well as the competition.

Re:Candy Japan 2017 Year in Review by bemmu on Wednesday December 27, 2017 @04:05AM (#16013714)
I have long stopped telling people whether their charge worked if an order looks suspicious, to prevent them from getting this information. So that wouldn't work now.
Re:Candy Japan 2017 Year in Review by the-dude on Wednesday December 27, 2017 @04:24AM (#16013778)
I am not sure I follow, could you clarify? You do send a confirmation after sign up I presume?
Re:Candy Japan 2017 Year in Review by bemmu on Wednesday December 27, 2017 @05:50AM (#16014049)
Well I can't say "your payment was processed successfully", because that would give information to people who want to test cards. Rather I manually read through the orders, and only contact people if something went wrong with their payment AND the order doesn't look suspicious.
Re:Candy Japan 2017 Year in Review by the-dude on Wednesday December 27, 2017 @06:21AM (#16014133)
Are you on Stripe?
Re:Candy Japan 2017 Year in Review by homero on Wednesday December 27, 2017 @05:31AM (#16013981)
Can't find it but he had a whole blog post about it
Re:Candy Japan 2017 Year in Review by _susanoo on Wednesday December 27, 2017 @03:37AM (#16013636)
So I guess credit card frauds are human too
Re:Candy Japan 2017 Year in Review by bemmu on Wednesday December 27, 2017 @04:04AM (#16013707)
Thanks, fixed the https issue.

Maybe I have a too rosy world view, but I don't think rivals would be this mean. Probably some simpler answer. Maybe there's some forum post somewhere like "how I got free candy by using this list of credit card numbers" and people keep trying that.

Re:Candy Japan 2017 Year in Review by LV-426 on Wednesday December 27, 2017 @04:48AM (#16013850)
You're probably right; I've read of people's Google ranking being trashed by rivals using spamming tools, so maybe my world view is too dark. OTOH, I seem to be naive about how credit card scamming works.