News for hackers. Stuff that matters.

arfrank

Re:Credit cards have a privacy problem on Monday August 26, 2019 @09:09PM (#20805365)
Re:Credit cards have a privacy problem on Monday August 26, 2019 @08:26PM (#20805093)
Anne gave a talk a few years back that was enjoyable and informative for the NSAs position 5 years ago http://longnow.org/seminars/02014/aug/06/inside-nsa/
I’d suggest you look at what we built at Final. Getfinal.com

We took a hard deep look at a massive stagnant industry (credit cards) and use experience and features as differentiators

Re:Amazon Is Seeking $16B Bond Sale for Whole Foods on Tuesday August 15, 2017 @11:34PM (#15024776)
Amazon is 4 in every $10 spent online in the US. They have a scale similar to Costco/WM who only got deals for/to break exclusivity. Amazon pays less than 2%, much less depending on card type. Manages fraud to about 6BPS on transactional basis. But the concept of the running a CC is not out of the question, but the economics/complexity don't align yet...
Re:The Mumps Programming Language on Monday March 13, 2017 @02:04PM (#13860552)
It's core to one of the leader's in banking core's new cloud based offerings: https://www.fisglobal.com/Solutions/Banking-and-Wealth/Servi...
Re:What happens when you swipe a credit card on Monday March 06, 2017 @12:42PM (#13804373)
There are a tons of reasons to keep our signups closed for now. One non-obvious reason to most people is that it costs us money to lend out money to customers. Theres a ton of others we're working on solving in parallel too
Re:What happens when you swipe a credit card on Monday March 06, 2017 @12:40PM (#13804361)
Email me @ [email protected] I'd love to hear more, if you don't mind. We encourage people to use the physical card and just treat it as disposable if it ever gets skimmed/breached/stolen/lost. We made sure it impacts none of your other relationships :)
Re:What happens when you swipe a credit card on Monday March 06, 2017 @12:39PM (#13804349)
Email me at [email protected] and we can get you a code to apply :) We're working on broadening our underwriting criteria, but this is a complicated business overseen by an incredible amount of regulation, while also taking risk when we issue new lines of credit. Large banks throw around a lot of $ to make it work (a lot in this statement), but to start a new provider takes a lot of tactical decisions and iteration to grow in a safe and sustainable way.
Re:The Linux Credit Card on Saturday December 17, 2016 @11:08AM (#13201155)
Industry standard is about 10 BPS for affinity programs and a bounty for acquiring customers for the bank. No rewards program might make this one higher, maybe 70-110 but none more.

A better plan if you wanted to support Linux would be 2% cashback card that you donate all rewards to Linux.

Re:Final – A credit card built for the 21st century on Wednesday October 19, 2016 @11:47AM (#12744829)
Thanks will look into it. Some old janky JS we have from what is still our original marketing site at its core. This codebase is separate from all actual customer data/sensitive things, so it could use some JS best practice cleanup clearly (even though this might be a responsive CSS thing)
Re:Final – A credit card built for the 21st century on Wednesday October 19, 2016 @11:46AM (#12744814)
Both email and phone, but for full transparency we actually prefer email since it keeps a full log of conversations with consumers for both parties to have. Our card has a number on the back of it and a few other in-app spots have our number on it.
Re:Final – A credit card built for the 21st century on Wednesday October 19, 2016 @11:44AM (#12744794)
We seriously appreciate the thoughtful feedback. Email me, [email protected], if you want to learn/discuss more about why we made some of the decisions we made day one. It really comes down to resources and a team of 12 working against incumbents with teams of 1200+.
Re:Final – A credit card built for the 21st century on Wednesday October 19, 2016 @03:10AM (#12741716)
Yes, many times over, but always looking for holes, and actually that infrastructure is separate from the pieces that are exposed to public web.

Traditionally, we do it this way too, these piece of the payments ecosystem are all whitelisted IPs for access and MPLC circuits for connections.

Re:Final – A credit card built for the 21st century on Wednesday October 19, 2016 @02:57AM (#12741663)
Working on native Android full steam now, but yep started with iPhone for now. Web is full responsive and have a ton of Android users using it and happy w/ experience. But point taken.
Re:Final – A credit card built for the 21st century on Wednesday October 19, 2016 @02:36AM (#12741586)
Fair point, problem is that theres no short answer here. We partners with a bank to get our own BIN (https://en.wikipedia.org/wiki/Payment_card_number), that when loaded onto the networks, gets routed to our core infrastructure. There are many ways to segment this BIN, randomly, PRIN(?), few other industry standards, and so when you want to issue a new consumer a new card # you use whatever your algorithm is, and assign it to that customers account (or whatever exactly your data model is).

So its 2/3rds BD to get setup, 1/3 enterprise engineering and a lot of integration work to get fully setup and running. Payments is the only trillion dollar industry where nothing is written down, we're working on changing that since we find a lot of the stories fascinating and so do most people we retell them to.

If anyone is in Oakland area and wants a primer, always happy to share, we spent 3 years learning industry and now its our time to start giving back.

Re:Final – A credit card built for the 21st century on Wednesday October 19, 2016 @02:31AM (#12741572)
In all honesty, the juice isn't worth the squeeze. When you put a battery into that form factor battery life is a big issue and keeping in sync with your phone really harms it. Add recharging and you have other tradeoffs, so EMV gets us 95%+ of the way there and we're happy not having to solve really hard esoteric challenges related to things like the Bluetooth stack for BLE use.
Re:Final – A credit card built for the 21st century on Wednesday October 19, 2016 @02:11AM (#12741491)
Email [email protected].

And not sure why someone reposted our website, but always happy to discuss the intricacies of human behavior and how it relates to payments.

Re:Final – A credit card built for the 21st century on Wednesday October 19, 2016 @02:09AM (#12741477)
A lot of funny stories about how that piece of consumer software exists in the world today. About 5 different parties involved, some who are 100% competitors (V vs. MC). 16 or so years ago, MC bought a company called Orbiscom that provides what Citi & BoA use for vCards. Its a layer at the network to provide these mappings and so when BoA issues a Visa card, and you request a virtual card, you're making a call out to a MC service to generate them on a Visa BIN.

None of this even addresses or ties who BoA uses as their core processor for CC, which is now TSYS, and typically have little knowledge a vCard was used.

The good thing for what we're doing at Final is that this goes beyond many credit card numbers, its rethinking what is a piece of plastic in hundreds of millions consumers pockets for how we shop and interact w/ merchants in this day and age.

Re:Final – A credit card built for the 21st century on Wednesday October 19, 2016 @01:59AM (#12741431)
We do it from the core infrastructure we run ourselves. Built the full stack to have flexibility and innovate in industry where 90+% of CC transactions still run on mainframes & COBOL
Re:Final – A credit card built for the 21st century on Wednesday October 19, 2016 @01:57AM (#12741420)
All companies start somewhere, and when we look at the rewards games being played it becomes beyond a loss leader (been meaning to write up a blog post explaining issuer side economics on interchange). Deals like this: http://www.bloomberg.com/news/articles/2015-04-17/costco-see... (<0.40% interchange) make it overly painful to compete at top tier rewards today without having perverse consumer incentives, but we have ideas of where loyalty should go and are driving towards that.

As for customer service, we believe you can't tout that as differentiator, you just have to do a great job and your customers will speak for you. Amex did a great job over last 50 years, but is struggling to be relevant in this day and age (http://www.bloomberg.com/features/2015-how-amex-lost-costco/)

Re:Final – A credit card built for the 21st century on Wednesday October 19, 2016 @01:51AM (#12741397)
Virtual cards are just about 20 years old, we're starting there, but already working on a lot more pieces to what it takes to be a truly digital credit card.
Re:Final – A credit card built for the 21st century on Wednesday October 19, 2016 @01:51AM (#12741395)
Will have team take a look tomorrow and adjust it to the intent is clearer, this reads weirdly. Honestly, don't think the wordplay was intentional, we just went through our second PCI level 1 audit & take cardholder security & privacy very seriously.

Older »