News for hackers. Stuff that matters.

A comment on Stripe is not blocking large-scale card testing attacks for many AI companies. Parent comment

Re:Stripe is not blocking large-scale card testing attacks f... by simfree on Tuesday June 06, 2023 @04:31AM (#36209854)
That is a very hopeful (and naive) view of liability in the merchant processor space. By default all liability falls onto the business, not your merchant processor unless you specifically negotiated for a liability shift.

Stripe will not eat the fees for card testing.

[ Parent | on HN ]
Re:Stripe is not blocking large-scale card testing attacks f... by neurostimulant on Tuesday June 06, 2023 @04:55AM (#36210039)
What can we do then? Stripe's own documentation recommends us to use Stripe Checkout because it's the most secure against card testing, and that checkout page is owned and operated by stripe so it's not like we can add custom card testing detection logic there.
[ Parent | on HN ]
Re:Stripe is not blocking large-scale card testing attacks f... by weird-eye-issue on Tuesday June 06, 2023 @06:38AM (#36210700)
Radar fraud rules. Like is already discussed in the Twitter thread. How hard is it to read?
[ Parent | on HN ]
Re:Stripe is not blocking large-scale card testing attacks f... by neurostimulant on Tuesday June 06, 2023 @02:11PM (#36216853)
I admit I didn't scroll too far down beyond the signup modal.
[ Parent | on HN ]