Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Critical PayPal Security Hack: Multiple Thefts Now Reported–Check Your Settings

forbes.com

Post reply on HN
Print view View original

11–20 of 84 posts

Re: Critical PayPal Security Hack: Multiple Thefts Now Reported–Check Your Settings

#11

Post by numlock86 »

As a power user of Google Pay in conjunction with PayPal (in Germany) should I be worried now and remove - as recommended - my PayPal account from Google Pay? A lot of people around me also use it the same way as I do and no one heard of any such incident yet. Well, now that I told them, of course everyone heard of it at least ...

What are those "multiple reports"? I see the source is golem.de (don't get me started on that one) and "multiple reports" can just mean that less than half a dozen people got busted on their Google accounts for not using proper 2FA in that context.

Also the article states that Google Pay provides a virtual credit card when used with PayPal. How? All I saw up until now was virtual debit cards.

Re: Critical PayPal Security Hack: Multiple Thefts Now Reported–Check Your Settings

#14

Post by dagurp »

s5ma6n wrote: post #3

Even yesterday there was this thread https://news.ycombinator.com/item?id=22403565 PayPal needs to seriously reevaluate how they want to approach the vulnerabilities. Why have a bounty program if you are going to act hostile towards the white hat community or even ignore their reports?

They need to be audited IMO

Re: Critical PayPal Security Hack: Multiple Thefts Now Reported–Check Your Settings

#16

Post by jotm »

numlock86 wrote: post #11

As a power user of Google Pay in conjunction with PayPal (in Germany) should I be worried now and remove - as recommended - my PayPal account from Google Pay? A lot of people around me also use it the same way as I do and no one heard of any such incident yet. Well, now that I told them, of course everyone heard of it at least ... What are those "multiple reports"? I see the source is golem.de (don't get me started o…

> Also the article states that Google Pay provides a virtual credit card when used with PayPal. How? All I saw up until now was virtual debit cards.

Naming confusion, I think. To some people (mostly Americans), credit and debit cards are the same thing - just plastic payment cards. Some Europeans think Visa/Mastercard can only be credit cards (they can be either credit or debit).

To me, the difference is that credit cards use the bank's/issuer's balance (that you can pay back later, all at once or spread out in smaller monthly payments), while debit cards use your bank account balance directly. I think that's the proper differentiation.

Re: Critical PayPal Security Hack: Multiple Thefts Now Reported–Check Your Settings

#18

Post by inetknght »

luckylion wrote: post #10

> PayPal told me that “the security of customer accounts is a top priority for the company.” I wish journalists would ridicule this corporate bullshit lingo instead of just relaying it. I'm fairly certain that anyone that ever had contact with PayPal's (or Amazon's, or probably any other large corporation's) customer service with issues regarding security can attest that it's absolutely not one of their top prioritie…

> They haven't even bothered to make their official emails not look like phishing attempts. They don't care about security.

Man, now that you mention about it, I thought the same thing every time I see an email from PayPal and just disregarded the thought because it's so common from websites and nobody cares. It's _literally_ the business model of some of the top email marketing companies.

In either case, now that you mention it, I don't think it was mentioned in yesterday's six vulns disclosed or in today's.

Re: Critical PayPal Security Hack: Multiple Thefts Now Reported–Check Your Settings

#19

Post by 7777fps »

luckylion wrote: post #10

> PayPal told me that “the security of customer accounts is a top priority for the company.” I wish journalists would ridicule this corporate bullshit lingo instead of just relaying it. I'm fairly certain that anyone that ever had contact with PayPal's (or Amazon's, or probably any other large corporation's) customer service with issues regarding security can attest that it's absolutely not one of their top prioritie…

It's called the "right of reply". It's courtesy to reach out to a company and include their response without critique about whether it's "corporate bullshit".

Re: Critical PayPal Security Hack: Multiple Thefts Now Reported–Check Your Settings

#20

Post by saystupidthings »

jotm wrote: post #16
numlock86 wrote: post #11

As a power user of Google Pay in conjunction with PayPal (in Germany) should I be worried now and remove - as recommended - my PayPal account from Google Pay? A lot of people around me also use it the same way as I do and no one heard of any such incident yet. Well, now that I told them, of course everyone heard of it at least ... What are those "multiple reports"? I see the source is golem.de (don't get me started o…

> Also the article states that Google Pay provides a virtual credit card when used with PayPal. How? All I saw up until now was virtual debit cards. Naming confusion, I think. To some people (mostly Americans), credit and debit cards are the same thing - just plastic payment cards. Some Europeans think Visa/Mastercard can only be credit cards (they can be either credit or debit). To me, the difference is that credit…

You're the first person I've ever met that isnt entirely sure of what the difference is between a credit and debit card.
Post reply on HN