News for hackers. Stuff that matters.
Re:Unexpected challenges of making money on the internet by orthecreedence on Thursday March 08, 2018 @11:54AM (#16545617)
As a programmer AND a Joe Sixpack, I already have Paypal. They already have my bank/cc. I'm not going to get rid of it. By going to Stripe, now my attack vector has doubled.

That said, if there was an alternative that stored my CC info and let me do one-click buying (does Stripe do this??) that was integrated into 60%+ of payment systems, I'd gladly use it instead of Paypal, who I've grown to abhor.

Re:Unexpected challenges of making money on the internet by mglukhovsky on Thursday March 08, 2018 @01:09PM (#16546261)
You could also look at the new W3 Payment Request API [1] that stores card details securely in modern browsers.

Stripe has a Payment Request Button that enables one-click buying with Apple Pay, Google Pay, or the Payment Request API. [2] The button will choose whichever method is best and available for your specific browser.

[1]: https://www.w3.org/TR/payment-request/

[2]: https://stripe.com/docs/stripe-js/elements/payment-request-b...

Re:Unexpected challenges of making money on the internet by orthecreedence on Thursday March 08, 2018 @04:26PM (#16547758)
Thanks, Mike! I'll check these out.
Re:Unexpected challenges of making money on the internet by ThrustVectoring on Thursday March 08, 2018 @03:25PM (#16547344)
Why are you worried about unauthorized use of your credit card number? Under US law, you are liable for $0 of the charges. If you lost your physical card or had it stolen, you're liable for up to $50 of charges made before you reported it as such.

Legally and financially, if a malicious website uses my card number poorly, the consequences for me are "I notice an issue and Chase mails me a new credit card".

Debit card numbers, sure, that's a whole other ball game. But a credit card number? IDGAF if it gets stolen. It's not my problem, and I like it that way.

Re:Unexpected challenges of making money on the internet by matwood on Thursday March 08, 2018 @04:08PM (#16547638)
> Why are you worried about unauthorized use of your credit card number? Under US law, you are liable for $0 of the charges.

While you're correct, it's a huge PITA replacing a CC. I have almost all my bills going through my CC for points. Then there are places like my crap gym that charges a fee if the CC is ever denied for any reason.

Re:Unexpected challenges of making money on the internet by edwhitesell on Thursday March 08, 2018 @05:33PM (#16548320)
Some (most) CCs will allow prior recurring charges to continue with an old/lost/stolen CC number for some period of time (potentially until the expiration date) so you can avoid that headache.

In the case of my AmEx, I have some monthly charges still using an old number from 3 years and 2 stolen cards ago. Discover used to offer this too, though I don't know if they currently do.

Re:Unexpected challenges of making money on the internet by matwood on Thursday March 08, 2018 @07:30PM (#16548939)
Except I think the vendor has to do something? I know some vendors immediately start failing and others seemingly work fine. Regardless of whose problem it is, it becomes a PITA for me.
Re:Unexpected challenges of making money on the internet by edwhitesell on Thursday March 08, 2018 @08:10PM (#16549145)
I don't see why the merchant would have to do anything. If the card/bank allows the transaction, because they recognize the merchant using the "old" card info it'll go through.
Re:Unexpected challenges of making money on the internet by BeetleB on Thursday March 08, 2018 @10:01PM (#16549537)
I think the concern of losing money over a stolen credit card is very low. The concern of identity theft, OTOH, is very high and very costly. Suddenly being denied a loan to buy a house, and then having difficulty finding any place to rent - pretty bad. Took someone I know over a year to rectify.
Re:Unexpected challenges of making money on the internet by slobotron on Thursday March 08, 2018 @01:02PM (#16546212)
With stripe checkout, you can click "remember me".

https://stripe.com/checkout/info