News for hackers. Stuff that matters.
Re:Linode hacked, CCs and passwords leaked by carbocation on Monday April 15, 2013 @03:27PM (#5553657)
Just like I can have application-specific passwords for my Google account, I wish I could have application-specific credit card numbers from my CC issuer.

If I had these, I would immediately cancel my Linode-specific CC# and reissue a new one. I would not have to worry that my other recurring bills will go unpaid, or spend hours dealing with tracking them down and changing them.

Re:Linode hacked, CCs and passwords leaked by clauretano on Monday April 15, 2013 @03:37PM (#5553723)
Bank of America provides this [1], as does Citibank [2] and likely others.

Paypal at one time provided this service as well, but it doesn't seem to anymore [3]

1: https://www.bankofamerica.com/privacy/accounts-cards/shopsaf...

2: https://www.citibank.com/us/cards/gen-content/messages/van/i...

3: https://www.paypal.com/va/webapps/mpp/security/general-freet...

Re:Linode hacked, CCs and passwords leaked by carbocation on Monday April 15, 2013 @03:53PM (#5553842)
Crazy, thanks for sharing. I use BofA and am interested, but here is the issue:

> Set your Valid through date for up to 1 year in the future

I'd really like it to be up to the expiration date of my card. It's probably worth doing anyway, I suppose. Thanks for the heads up. Given the zero-liability status, I'm surprised that banks don't promote this feature more visibly.

Re:Linode hacked, CCs and passwords leaked by pfranz on Monday April 15, 2013 @05:29PM (#5554527)
I've used the BoA and it's fantastic for one-time purchases. Like another commenter mentioned, it's only good for 1 year and you give a global cap. It would be nice if it was more permanent and allowed for a weekly or monthly cap so you could use it with subscription services or something like Amazon.
Re:Linode hacked, CCs and passwords leaked by GuyCall on Monday April 15, 2013 @05:41PM (#5554592)
Nice. I wonder if any UK providers do this
Re:Linode hacked, CCs and passwords leaked by kalleboo on Tuesday April 16, 2013 @12:51PM (#5559250)
My bank in Sweden does (Swedbank), so it's not a US-only thing. They even have an iPhone app for it.
Re:Linode hacked, CCs and passwords leaked by phn on Monday April 15, 2013 @03:47PM (#5553807)
The portuguese ATM network operator provides this for free (its called mbnet btw). You can even set expiry times and value limit, it's the best thing to use when paying for stuff online. Want to buy a 9€ game? Just create a 10€ card and use it.
Re:Linode hacked, CCs and passwords leaked by maushu on Monday April 15, 2013 @04:16PM (#5554008)
Yup, I use this all the time. They even, recently, added support to multi-use cards with bigger expire dates.

I wonder how hard would it be to make a startup like this.

Re:Linode hacked, CCs and passwords leaked by jaredsohn on Monday April 15, 2013 @03:32PM (#5553697)
>I wish I could have application-specific credit card numbers from my CC issuer

Do some research on "virtual account numbers". I haven't used them myself, so I can't verify how well they work.

Re:Linode hacked, CCs and passwords leaked by luuse on Monday April 15, 2013 @03:36PM (#5553720)
Visa have this (probably others too) that you can generate and either set a time or value limit on. Don't think you can set a monthly limit though unfortunately. They call it e-cards (in sweden at least).
Re:Linode hacked, CCs and passwords leaked by treahauet on Monday April 15, 2013 @03:33PM (#5553703)
Either this, or a assignable CVV codes. Something like that would be awesome.
Re:Linode hacked, CCs and passwords leaked by dangrossman on Monday April 15, 2013 @03:44PM (#5553783)
That wouldn't work since CVV codes aren't sent with recurring transactions (they can't, since they cannot be stored).
Re:Linode hacked, CCs and passwords leaked by gcr on Monday April 15, 2013 @05:12PM (#5554385)
Why can't they be stored?

Is it a legal requirement to prevent merchants without the CCV from using the credit card?

...oh wait

Re:Linode hacked, CCs and passwords leaked by duskwuff on Monday April 15, 2013 @09:59PM (#5555716)
Because the CVV is used to indicate the "presence" of the customer at a transaction. CVV1 (which is on the magstripe) is used to indicate "card-present" physical transactions, CVV2 (printed on the back) is used for "customer just typed this in" non-physical transactions.
Re:Linode hacked, CCs and passwords leaked by gcr on Tuesday April 16, 2013 @08:55PM (#5561922)
That makes much more sense. Thank you.
Re:Linode hacked, CCs and passwords leaked by jimktrains2 on Monday April 15, 2013 @04:03PM (#5553914)
__should__ not be stored
Re:Linode hacked, CCs and passwords leaked by treahauet on Monday April 15, 2013 @04:35PM (#5554150)
Good point. Regardless, there should be __something__.