201–210 of 361 posts
Earlier quoted context omitted.
Got it, thanks for the link.
It was in my original post!
You can ignore my comment about the /payments page, I'll assume you checked that, so yeah, that's insane if you can update payment information on an insecure page.
Earlier quoted context omitted.
I thought it was pretty clear, but I'm willing to elaborate. The requirement is that card data is securely removed when it is no longer required. They are no longer billing customers at HomeJoy as the business has been wound up, so the credit card data should have been deleted. Also: no customer has given them any right to have their credit card billed to an entirely new entity. Credit card information should not be…
Yeah, I get your position (hopefully!), but I think I'd rather hear from a lawyer whether this is OK or not, my guess is that it is OK. The snippet you pasted says also: ... regulatory, and/or business requirements A business that is going out of business may treat this data as a business asset and may need to retain it for a certain period even when they are inactive. Most terms of service do allow for transfer of a…
Earlier quoted context omitted.
Not the entire card, just the last four digits and expiration date. Is there anything that says that's not allowed? The PCI is about storage of the data. It's bonkers to display it over an insecure connection, but I don't think that it's disallowed.
You really need to read the PCI-DSS standard before you make comments like that. Rather than me point out exactly why what you just said was completely wrong, I suggest you download it from here: https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-1.... At the very least, read requirement 4. The simple fact is that they were allowing customers to enter their credit card details and submit that data over HTTP.
Earlier quoted context omitted.
Welp, might as well ask if no-one else is: What do you mean by 'exploring a few different angles on the space'? How is you new service going to be better than Home Joy or different? Essentially, considering what happened to Home Joy, why is it going to be different this time around? Great job on Home Joy the first time 'round, btw.
Same great technology, less debt / more equity.
I think it goes without saying that there is nothing remotely legitimate happening here. The fact that Aaron posted this comment and expected anybody to believe it is remarkable. That being said, I spent 5 minutes researching Aaron Cheung and I was astonished by what I found. He has a Twitter account, but has posted exactly 0 times [1]. He has an HN account, but has posted exactly 0 times [2], and only commented twic…
Earlier quoted context omitted.
Yeah, I get your position (hopefully!), but I think I'd rather hear from a lawyer whether this is OK or not, my guess is that it is OK. The snippet you pasted says also: ... regulatory, and/or business requirements A business that is going out of business may treat this data as a business asset and may need to retain it for a certain period even when they are inactive. Most terms of service do allow for transfer of a…
Nitpick: Actually it was ZenPayroll that changed their name to Gusto. Zenefits is definitely still Zenefits.
Obviously, I am a huge fan of nit picking, so it's always welcomed :)
Earlier quoted context omitted.
Aaron, I was a homejoy customer. I am frustrated and concerned that my credit card # was sold to another company without my consent. How can users opt-out of having their data sold to flymaids (or any future ventures)? The fact that flymaids' site is a poorly-built clone of a competitor's site also makes me scared that my data is not being protected.
Your CC is probably safe on Stripe's servers. Which makes me wonder -- does Stripe allow entire accounts to change hands willy-nilly like this?
I bought a small business from a brokerage site.
He transferred the Stripe account to me no problem. It was as simple as me making a Stripe user account and then him adding me to the account he used for the business and then me removing him.
The entire process took minutes. It took about 3 weeks for PayPal.
I think it goes without saying that there is nothing remotely legitimate happening here. The fact that Aaron posted this comment and expected anybody to believe it is remarkable. That being said, I spent 5 minutes researching Aaron Cheung and I was astonished by what I found. He has a Twitter account, but has posted exactly 0 times [1]. He has an HN account, but has posted exactly 0 times [2], and only commented twic…
I'm one of the founders of Homejoy. I'm still very passionate about the home service space. After leaving Homejoy, I started FlyMaids, where we're exploring a few different angles on the space. We recently acquired the customer and service provider data from Homejoy. We're a small team that has been focused on moving quickly while bootstraping. We tried to quickly test different approaches, but we realize now that we…
Earlier quoted context omitted.
Welp, might as well ask if no-one else is: What do you mean by 'exploring a few different angles on the space'? How is you new service going to be better than Home Joy or different? Essentially, considering what happened to Home Joy, why is it going to be different this time around? Great job on Home Joy the first time 'round, btw.
Same great technology, less debt / more equity.