61–70 of 295 posts
This is standard PayPal. They don’t give a crap about their merchants and it’s been widely documented in the past. See https://www.google.com/search?q=paypal+horror+stories
Earlier quoted context omitted.
PayPal survives because they keep end users happy, we (the people using PayPal to take payment or integrating it) aren't the end user. Proof a ruthless focus in the right place can overcome almost anything. They've been shit forever.
> PayPal survives because they keep end users happy, we (the people using PayPal to take payment or integrating it) aren't the end user. I have no clue where you get that idea. PayPal was freezing end-users accounts, had a bad support and very inconsistent refund limits since forever. Almost everyone I know who heavily used it had issues with it at some point in time. Yeah as long as you just use PayPal once a year t…
Far less issues than I’ve had with my bank actually (random declines, locked out of my account due to technical issue) in the same number of years.
A few years ago, I sent my youngest son to a well-known online retailer to buy some computer gear. What he got was a counterfeit, a fake that was broken. He started the refund process, but I was pretty miffed that my reputation with my kid got mixed up in these poor business practices. So I emailed management and asked that they apologize to the kid. It took almost forever to get them to figure out that I was not ask…
>It took almost forever to get them to figure out that I was not asking for a refund. I was asking for somebody to explain what happened, apologize, and take steps for it not to happen again. This is not the payment processors job, this is the merchants job. Instead of PayPal you could just as well have contacted Visa/MC/Whoever or your issuing bank, they wouldn't have been able to do much for you either. E: Yeah, I…
It got me thinking about the standard assumption that any system limiting chars in a password must be storing passwords in plaintext and not hashing them, else there would be no logical reason to do so (since hash length is constant regardless of input length) - with the only exception being placing a really large limit (say 1024 chars) just to avoid performance issues with hashing really massive passwords.
But.. I refuse to accept that's what's happening here. It simply can't be the case that Paypal is storing plaintext passwords, can it? So there must be another explanation - but what is it?
The only thing I can think is that perhaps they are encrypting passwords, instead of hashing them, or started out doing this in the early days and have since switched to hashing passwords, but there were by then so many layers of validation cruft and/or dependent systems that somehow relied on the 20 char limit being enforced, that they were unable to remove the limit without breaking everything, and they've decided the tradeoff of just sticking with a 20 char limit is worth it.
Does anyone know of or can think of a better explanation for this?
No, most people would not be this agitated about a mistaken transaction being silently refunded. At best they'd probably assume the notification went to spam or something and went on with their day My bank doesn't notify me about any transactions, I have to check my bank book manually. Once a mistaken transaction showed up and disappeared a few hours later, with no trace left behind at all. I just assumed it was a mi…
I suppose the key is if Paypal put it in the wrong account then cleared up after themselves, I don't think that's a refund as such, you should be telling the account holder when they ask though. The other option is the payer paid money to the wrong account, in that situation this guy should be getting notified.
This isn't just an issue of 'not his money'. How are you supposed to know if your account is hacked, or some weird fraud is going on, or even just a straight forward, he sold something and thought he got paid for it.
-I had an old eBay account that was closed through inactivity
-I wanted to buy some headphones so I decided to create a new account
-When I went to eBay it had already given me a username through some sort of linked google account feature that used the google account I was logged in to
-I tried to buy 2 $40 headphones and it wouldn't let me, saying I was over my temporary purchase limit
-I figured maybe you can only buy one item at a time as a new user so I tried to buy a single pair of $40 headphones and got the same response
-I thought it might be my VPN, but my VPN was off at the time.
-I created a normal account linking it to my normal email and everything seemed well. I purchased the headphones successfully
-A few minutes later, I got an email that the first account had been suspended for suspicious activity. I first thought this was fine, until I read that I was not allowed to use any other eBay account ever again in my entire life. There were no options listed for recourse. Reading internet threads suggested that they were serious about this and that even if my other account still worked, they would eventually find it and close it.
Eventually I called and got a rep. I got the feeling he didn't believe me, but he fixed the issue so now I can use eBay again without worry. The whole experience left me a bit shaken though that triggering some automated flag nearly resulted in being cut off from one of the largest marketplaces in the world for the rest of my life.
I rarely use Paypal, but was forced to use it recently for something with no other payment option. Whilst there I decided to change my password, and was horrified to find that they limit passwords to 20 characters. It got me thinking about the standard assumption that any system limiting chars in a password must be storing passwords in plaintext and not hashing them, else there would be no logical reason to do so (si…
Mainframe.
I rarely use Paypal, but was forced to use it recently for something with no other payment option. Whilst there I decided to change my password, and was horrified to find that they limit passwords to 20 characters. It got me thinking about the standard assumption that any system limiting chars in a password must be storing passwords in plaintext and not hashing them, else there would be no logical reason to do so (si…
> Does anyone know of or can think of a better explanation for this? Mainframe.
I don’t know why companies do this but I notice that companies that don’t compete with Amazon tend to have horrible customer support, but as soon as Amazon enters the market suddenly everyone picks up the phone second ring, has chat, and sends out hand written e-mails.
I rarely use Paypal, but was forced to use it recently for something with no other payment option. Whilst there I decided to change my password, and was horrified to find that they limit passwords to 20 characters. It got me thinking about the standard assumption that any system limiting chars in a password must be storing passwords in plaintext and not hashing them, else there would be no logical reason to do so (si…