Kickstarter switches to Stripe

Re:Kickstarter switches to Stripe by geofft on Tuesday January 06, 2015 @12:44PM (#8845727)

There's a "Remember this card for future pledges" checkbox. So if you value having your CC saved, you can keep that feature.

[ Parent | on HN ]

Re:Kickstarter switches to Stripe by dspillett on Tuesday January 06, 2015 @12:46PM (#8845749)

But this is then an extra place where his credit card details are stored, and he may not have decided to trust Stripe like that yet.

[ Parent | on HN ]

Re:Kickstarter switches to Stripe by califield on Tuesday January 06, 2015 @12:56PM (#8845844)

Big payment processors like Stripe are storing your full credit card number forever whether you choose to "Remember me" or not.

The checkbox is whether you want to be able to pay again without retyping it.

[ Parent | on HN ]

Re:Kickstarter switches to Stripe by com2kid on Tuesday January 06, 2015 @06:12PM (#8847761)

I mentioned in another part of this thread, the payment page as shown on the blog entry does not indicate that my CC# is stored with Stripe, rather from all appearances it appears to be stored with Kickstarter.

Now having read this thread I get that in fact Stripe is storing it, but if I hadn't read the responses to my initial post, I'd just assume Kickstarter was asking to store my CC# which I wouldn't agree to.

[ Parent | on HN ]

Re:Kickstarter switches to Stripe by Aldo_MX on Tuesday January 06, 2015 @01:39PM (#8846141)

What Kickstarter save is a unique token, ex. da39a3ee5e6b4b0d3255bfef95601890afd80709 (not a real token, just an example).

The token can only be used with the private / public key pairs that Stripe provided to them, so even if a hacker got access to Kickstarter's database, they would still need the private/public keys to make use of the tokens.

Also, my expectations are that only whitelisted IPs should be able to access Stripe with the key pairs of Kickstarter.

[ Parent | on HN ]

Re:Kickstarter switches to Stripe by singlow on Tuesday January 06, 2015 @04:40PM (#8847310)

Not only that. The hacker could only use the token to transfer money between you and KickStarter, not to another account. So unless they also had access to make withdrawals from KickStarter - they couldn't do anything useful other than annoy KickStarter with a bunch of erroneous charges.

[ Parent | on HN ]

Re:Kickstarter switches to Stripe by Aldo_MX on Tuesday January 06, 2015 @08:31PM (#8848318)

Haha, I forgot to mention that.

Basically, the only important information Kickstarter gets from any card are the last 4 digits, whether it's Visa, Master Card, AMEX, etc., and the expiration date.

[ Parent | on HN ]

Re:Kickstarter switches to Stripe by com2kid on Tuesday January 06, 2015 @06:09PM (#8847744)

The box on Kickstarter does not indicate data is stored with stripe, it looks like it is stored with Kickstarter.

As others have indicated, this is one more place that my CC# is stored. I have more trust in Amazon's security than in Kickstarter's, although from what I have gathered reading this thread it sounds like the data is stored in Stripe, which I have a tendency to trust based on name recognition.

If the page is to be presented as is though, with no other information, I am not going to store my CC# with yet another .com that hasn't been around that long.

[ Parent | on HN ]

Re:Kickstarter switches to Stripe by CamperBob2 on Wednesday January 07, 2015 @04:20AM (#8849570)

If the page is to be presented as is though, with no other information, I am not going to store my CC# with yet another .com that hasn't been around that long.

Why not? Any fraudulent activity is your CC company's problem, not yours.

[ Parent | on HN ]

Re:Kickstarter switches to Stripe by com2kid on Wednesday January 07, 2015 @05:35PM (#8853797)

And I have to get all my cards replaced. Again. Which means updating all the merchants who do have my CC#. All of that has a cost in terms of my time!

[ Parent | on HN ]