News for hackers. Stuff that matters.
Re:Zed Shaw Explains How Stripe Is PayPal Circa 2010 by massysett on Sunday October 09, 2022 @08:33AM (#33140410)
It’s pretty surprising that credit card companies will route charges to the particular “account” linked with a “number” even if the “number” is “closed” or “cancelled” or “expired”. Certainly not the experience one intuitively expects up front. I realized this when the bank issues me a new card proactively due to a data breach, but old recurring charges still work.

I guess this is both for customer convenience and to give the bank more flexibility, but I think this would be a lot simpler if closed credit card numbers just stopped working.

Re:Zed Shaw Explains How Stripe Is PayPal Circa 2010 by cj on Sunday October 09, 2022 @08:39AM (#33140450)
If anyone is interested in how this works:

https://stripe.com/docs/saving-cards#automatic-card-updates

> Stripe works with card networks and automatically attempts to update saved card details whenever a customer receives a new card (for example, replacing an expired card or one that was reported lost or stolen).

> It is widely supported in the United States, allowing Stripe to automatically update most American Express, Visa, Mastercard, and Discover cards issued there.

Re:Zed Shaw Explains How Stripe Is PayPal Circa 2010 by prirun on Sunday October 09, 2022 @09:30AM (#33140784)
Google did this to me with GCS: they automatically updated my expiring credit card. It's not a terrible feature, but I think users should consent to it before companies do it.
Re:Zed Shaw Explains How Stripe Is PayPal Circa 2010 by dwighttk on Sunday October 09, 2022 @12:58PM (#33142950)
They probably do. Remember the terms and conditions that we didn’t read?