Deliveroo users are getting defrauded • Hacker News Board

Re: Deliveroo users are getting defrauded

#321

Post by mey » Fri, Jan 25, 2019, 1:23 AM UTC

entity345 wrote: post #5

Perhaps worth mentioning, since it's nowhere in the article, that the first thing to do is not to spend hours on the phone with Deliveroo (or whoever else) but to call your bank to report the transactions as fraudulent and to block your card. That will probably get you a refund quicker (the transactions will likely be held until clarified) and will stop any further fraud. As for Deliveroo's support team... Not very g…

The word you should use to the merchant is chargeback. They should sit-up straight at that word, if not, just goto your credit card company.

Re: Deliveroo users are getting defrauded

#322

Post by shalmanese » Fri, Jan 25, 2019, 1:28 AM UTC

skh wrote: post #60

kitbrennan wrote: post #51

I'm not surprised by this response from Deliveroo. Their focus lately has definitely moved away from customer satisfaction. I discovered recently that drivers are allowed - without penalty - to reject an order when they reach the pickup location if they see the receipt and decide it is too far to travel [1]. As a customer you just see your food go: `Assigning Driver -> Driver En Route to Pickup -> Driver Arrived at P…

I think I’m old fashioned but I just don’t understand the appeal of these food delivery services. My friend’s son uses Postmates to order fast food and it seems absurd to me. I must be missing something about theses services given their popularity. Do you mind explaining why you use them?

If you have a small child, then just leaving the house to run an errand is an entire ordeal (esp if baby is sleeping right now). It's worth paying some non-trivial amount of money to avoid running errands. If you're also lower socio-economic class, then that leaves the only food you can afford being fast food.

People love to talk about these services as if they're only for young, single, hipsters but a significant portion of their use come from people with some kind of life limitation (same as the Whole Foods peeled oranges in a plastic box that people love to make fun of. These are a godsend for people with poor motor skills).

Re: Deliveroo users are getting defrauded

#323

Post by randerson » Fri, Jan 25, 2019, 1:29 AM UTC

jwdunne wrote: post #125

CaptainZapp wrote: post #102

“Deliveroo takes online security very seriously. Sadly fraudsters rely on the fact that people reuse the same passwords on multiple online services to try and gain entry to different accounts across the web.” Yeah! Blame it on your customers! Way to go! Sigh! Another gig economy service I'm damn sure never to use.

That's not even an excuse. There are solutions out there that mitigate the fact people reuse the same passwords.

Example solutions that wouldn't result in a massive customer drop-off though? The average person isn't going to set up 2FA or remember a randomly generated password just for a food delivery website.

Re: Deliveroo users are getting defrauded

#324

Post by adrianratnapala » Fri, Jan 25, 2019, 1:29 AM UTC

techntoke wrote: post #296

6nf wrote: post #294

Earlier quoted context omitted.

I've never heard of this happening but why would you want to keep using them anyway?

As someone else mentioned.. if you do this with Steam, you could get blocked from accessing all your past purchases. If you did this with your ISP, you may not have other high-speed ISPs to choose from.

And here is the irony.

Money-as-a-service (banks) give you the power to do this. But dependence on anything-else-as-a-service gives the provider power to make you think twice.

Re: Deliveroo users are getting defrauded

#325

Post by randerson » Fri, Jan 25, 2019, 1:33 AM UTC

snowwolf wrote: post #312

mannykannot wrote: post #309

Earlier quoted context omitted.

'So if it's a small irrelevant website, there isn't likely to be a high or severe risk to that "breach", so they should be ok.' To be clear, no website, depending on passwords alone, can know if an access was authorized by the person who is the subject of the account. Therefore, it would seem that the only sites that can use password-only authentication without risk are those that hold no personal information about t…

>> According to your own interpretation of the law Look, I am not a laywer, and I am happy for someone to correct me here, but this is the wording of the law: "A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data." Is there anything in that sentence that means a successful credential stuffing atta…

a) the data wasn't breached through the credential stuffing attack, it was breached at an earlier time on another site. b) the credential stuffing attack itself is authorized access (because from the site's perspective, the user provided the correct username and password), not unauthorized access.

Re: Deliveroo users are getting defrauded

#326

Post by sundvor » Fri, Jan 25, 2019, 2:24 AM UTC

anitil wrote: post #319

Tsubasachan wrote: post #305

Earlier quoted context omitted.

This is also the reason why creditcards are so ridiculously expensive. But then is there literally any alternative payment method in the US that does not involve a creditcard? It seems like the US banking system has just not invented anything in the last 30 years. Its not rocket science: money from my bank account to Deliveroo's bank account in (near) real time.

This is a peculiarly US phenomenon. Much of the UK, EU, Aus etc are much more willing to adopt new payment technology. (Can't speak for the non English speaking world but obviously China is way ahead) Surprisingly the US is much harder to convince. Ask people under 30yo in Aus or the UK when they last wrote a cheque, and the answer "what's a cheque?" is likely the response. Signing for a payment, magstripe, even usin…

Yeah what is a cheque? ;)

I can go weeks without my wallet now, Samsung Pay on my phone works just about everywhere in Australia, and it's great. Banking app even lets me generate a code to get cardless cash from ATMs, should I need notes.

For transactions bigger than ~AUD100 I do have to enter my pin but that's a minor inconvenience.

Re: Deliveroo users are getting defrauded

#327

Post by austhrow743 » Fri, Jan 25, 2019, 3:46 AM UTC

mcv wrote: post #52

Waterluvian wrote: post #18

Earlier quoted context omitted.

This is basically the sole "feature" of credit cards I value. Any time I'm buying something from somewhere that might act poorly, I use a credit card for the free leverage I have in a disagreement. Had an old phones screen repaired at a store inside a Walmart. They fixed it but half the screen had no touch capability. They were highly resistant to doing anything about it until I said I would just do a charge back. To…

> This is basically the sole "feature" of credit cards I value. Any time I'm buying something from > somewhere that might act poorly, I use a credit card for the free leverage I have in a disagreement. But without a credit card, they wouldn't even have been able to get your money without authorisation. I don't see how something like this would have been possible with a system that requires explicit authorisation per…

Little confused as to why you chose their comment as the place to mention this downside.

Their story is about a situation where they gave explicit authorisation. They intentionally paid.

Re: Deliveroo users are getting defrauded

#328

Post by [deleted] » Fri, Jan 25, 2019, 3:50 AM UTC

dmos62 wrote: post #134

kitbrennan wrote: post #51

I'm not surprised by this response from Deliveroo. Their focus lately has definitely moved away from customer satisfaction. I discovered recently that drivers are allowed - without penalty - to reject an order when they reach the pickup location if they see the receipt and decide it is too far to travel [1]. As a customer you just see your food go: `Assigning Driver -> Driver En Route to Pickup -> Driver Arrived at P…

Actually, the driver already knows where the destination is before going to pickup. If he rejects offer after getting to restaurant, it's probably because he asks the staff how long it will take, they reply 10 minutes, which usually means 20, and the driver decides to go looking for another offer. This is largely because some restaurants start making the order only after a driver arrives.

[deleted]

Re: Deliveroo users are getting defrauded

#329

Post by rlue » Fri, Jan 25, 2019, 4:05 AM UTC

Waterluvian wrote: post #18

entity345 wrote: post #5

Perhaps worth mentioning, since it's nowhere in the article, that the first thing to do is not to spend hours on the phone with Deliveroo (or whoever else) but to call your bank to report the transactions as fraudulent and to block your card. That will probably get you a refund quicker (the transactions will likely be held until clarified) and will stop any further fraud. As for Deliveroo's support team... Not very g…

This is basically the sole "feature" of credit cards I value. Any time I'm buying something from somewhere that might act poorly, I use a credit card for the free leverage I have in a disagreement. Had an old phones screen repaired at a store inside a Walmart. They fixed it but half the screen had no touch capability. They were highly resistant to doing anything about it until I said I would just do a charge back. To…

As a matter of principle, I would rather just do the chargeback (and get it really fixed somewhere else) than use it as leverage to negotiate for what I want on the spot.

If a company is prepared to stiff me like that, the convenience of having it fixed right away is not worth the concession of letting them have my money when all is said and done. Is that just me?

Re: Deliveroo users are getting defrauded

#330

Post by rlue » Fri, Jan 25, 2019, 4:10 AM UTC

skh wrote: post #60

kitbrennan wrote: post #51

I'm not surprised by this response from Deliveroo. Their focus lately has definitely moved away from customer satisfaction. I discovered recently that drivers are allowed - without penalty - to reject an order when they reach the pickup location if they see the receipt and decide it is too far to travel [1]. As a customer you just see your food go: `Assigning Driver -> Driver En Route to Pickup -> Driver Arrived at P…

I think I’m old fashioned but I just don’t understand the appeal of these food delivery services. My friend’s son uses Postmates to order fast food and it seems absurd to me. I must be missing something about theses services given their popularity. Do you mind explaining why you use them?

Their first-customer discounts and incentives are pretty enticing.

I live in Taiwan, where Deliveroo gives you about $3.50 off your first order, and delivery is factored into the price. A friend of mine ordered a $6 pizza that she ate half of and brought the rest of to work the next day. All told, she paid $2.50 for two lunches, and didn't even have to leave the office.

That doesn't sound better than the alternative to you?