Live data from Hacker News

PayPal.Me

paypal.me

51–60 of 83 posts

Re: PayPal.Me

#52
post #9
post #4

Based on my previous paypal experiences, I would rather send my money with any of the other money platforms that are out there.

Square or Stripe?

Stripe and Square are both my goto service. But why limit yourself to one avenue of getting paid. Best to be flexible.

Re: PayPal.Me

#55
post #22

I attempted to sign up with a 50 character 1Password-generated password, and was told that passwords cannot be longer than 20 characters. I can't see any reason for this other than that they're storing them either encrypted or in cleartext. Use with caution.

> I can't see any reason for this other than that they're storing them either encrypted or in cleartext.

One of the (bad) reasons companies impose password length limits is that the user is less likely to forger a shorter password, and therefore it saves money on inevitable support calls.

Granted, a 20-character limit is probably too high for this justification to be valid.

Re: PayPal.Me

#56
post #41

Just to test, send me money: https://paypal.me/martino Edit: Thank you for your €0,10 kind stranger!

Looks like they forgot to test for negative values. I put in -200.00 and it seems to have withdrawn the money from your account without problems ;)

ahahah! sadly I don't have so much money, so you can't steal it :)

Re: PayPal.Me

#57
post #22

I attempted to sign up with a 50 character 1Password-generated password, and was told that passwords cannot be longer than 20 characters. I can't see any reason for this other than that they're storing them either encrypted or in cleartext. Use with caution.

Wow, thanks for the heads up! Yeah, I mean like I only use websites that allow me to use 2048 character passwords, because I like to use lorem ipsum websites as my password generators.

Re: PayPal.Me

#58
post #46
post #22

I attempted to sign up with a 50 character 1Password-generated password, and was told that passwords cannot be longer than 20 characters. I can't see any reason for this other than that they're storing them either encrypted or in cleartext. Use with caution.

Normally I'd cry foul but 20 alphanumeric characters (roughly 64^20, or 1e36 combinations) is more than sufficient.

The issue is not the 20 characters, but the underlying reason for it. There's no technical reason they would need it unless they were storing it insecurely.

Granted it's possible they're limiting it to 20 for a nontechnical reason, but I have some 40-character passwords in a password manager. Long passwords are not only reasonable, but this is a giant alarm bell if they even imply they might be storing them insecurely.

Re: PayPal.Me

#59

Earlier quoted context omitted.

Tell me about it: https://www.paypal.me/signup It looks like somebody already grabbed https://www.paypal.me/login

I grabbed https://www.paypal.me/pages - suprised it worked considering https://www.paypal.me/pages/faqs , https://www.paypal.me/pages/terms and https://www.paypal.me/pages/1337

[deleted]
Post reply on HN