News for hackers. Stuff that matters.

A comment on Ask HN: How do I stop card testing attacks on my Stripe account?. Parent comment

Re:Ask HN: How do I stop card testing attacks on my Stripe a... by chrisdkemper on Monday April 24, 2023 @08:58AM (#35687114)
The attacker unfortunately doesn't have to use any aspect of the products that the site implements. In my situation I have different subscription levels, but the card attacker disregards all of it. Stripe really shouldn't allow for a card to be referenced without a predefined product also being referenced.

It's almost as is Stripe doesn't want to stop the attacks because they're making so much from fees

[ Parent | on HN ]
Re:Ask HN: How do I stop card testing attacks on my Stripe a... by tempaccount3333 on Monday April 24, 2023 @01:00PM (#35690237)
They are using my predefined products/subscriptions and aren't creating their own.
[ Parent | on HN ]