Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Visa Advertising Solutions (VAS) Opt Out

marketingreportoptout.visa.com

Post reply on HN
Print view View original

61–70 of 253 posts

Re: Visa Advertising Solutions (VAS) Opt Out

#61

Post by 3gg »

1-6 wrote: post #58

Sometimes I wonder how certain deals show up as website advertisements and recommendations. Certain blog posts or forum posts appear magically in my search result knowing what I was planning for. Deals and YouTube recommendations also seemed coincidental. Now I know that my debit card has been also leaking my purchase patterns and location. I better add more hosts to my Raspberry Pi-Hole.

Are you suggesting to just block the ads? What I find more annoying is the fact that the data is collected in the first place, as well as the opt-out vs opt-in by default. Your pi-hole won't protect you from that, since the moment you swipe that baby, Visa knows.

Re: Visa Advertising Solutions (VAS) Opt Out

#63

Post by 1-6 »

3gg wrote: post #61
1-6 wrote: post #58

Sometimes I wonder how certain deals show up as website advertisements and recommendations. Certain blog posts or forum posts appear magically in my search result knowing what I was planning for. Deals and YouTube recommendations also seemed coincidental. Now I know that my debit card has been also leaking my purchase patterns and location. I better add more hosts to my Raspberry Pi-Hole.

Are you suggesting to just block the ads? What I find more annoying is the fact that the data is collected in the first place, as well as the opt-out vs opt-in by default. Your pi-hole won't protect you from that, since the moment you swipe that baby, Visa knows.

I try to opt-out whenever I can but I’m pretty sure there are several other blind-spots I haven’t blocked. Pi-hole does that for both the US and worldwide. I just need to figure out how to proxy my phone web requests home through VPN or WireGuard.

Re: Visa Advertising Solutions (VAS) Opt Out

#64

Post by strombofulous »

bavell wrote: post #12
olyjohn wrote: post #7

Earlier quoted context omitted.

Wonder what would happen if someone managed to opt out every single Visa card. Would Visa have to honor that, or would that be grounds to allow them to opt everybody back in? Or would they just create a "different" marketing campaign, and just opt everybody into that one?

Only one way to find out! What are the possible legal risks to an innocent researcher testing this worthy hypothesis? Asking for a friend of course ;)

Probably the same thing that happened ~10 years ago in a very similar situation https://www.eff.org/cases/us-v-auernheimer

Re: Visa Advertising Solutions (VAS) Opt Out

#66

Post by TylerE »

bitexploder wrote: post #9
throwaway894345 wrote: post #2

The form doesn't require any sort of authentication, so I imagine someone could write a script to submit all (or a large portion of) the set of card numbers to this API. Might need to work around rate limiting and so on, but seems feasible?

Also, if there is any sort of timing difference on valid/invalid card numbers. Boom... timing attack / CC oracle :)

Card number alone doesn't get you anywhere.

An expiration date will get you a bit farther, but you really need the CVV also.

Re: Visa Advertising Solutions (VAS) Opt Out

#67

Post by imajoredinecon »

jackson1442 wrote: post #24

Here's an equivalent form for MasterCard: https://www.mastercard.us/en-us/vision/corp-responsibility/c...

Is it just me, or is the wording hugely misleading?

> To opt-out from our anonymization of your personal information to perform data analyses, please provide your Mastercard or Maestro payment card number

What we're opting out from is the use of the data, right?

I guess the charitable interpretation is that this was written by somebody incompetent, not by someone trying to be deliberately obfuscatory...

Re: Visa Advertising Solutions (VAS) Opt Out

#68

Post by adanto6840 »

WaxProlix wrote: post #27
xzel wrote: post #25

Earlier quoted context omitted.

Most open source text captchas have ML/DL or OpenCV OCR solutions and more advanced captchas like gcaptcha/hcaptcha you can send to a solver farm like 2captcha. The cost for the farm solutions is pretty cheap.

I'd only seen relatively pricey solver farm solutions, hence the question. What constitutes "cheap" here? For a baseline, .05USD/captcha seems not cheap to me.

Can be had much cheaper, especially if OK with a non-zero failure rate (and/or bit more latency). Note that my hands-on experience with this stuff is now relatively dated, from a "prior career" -- coming up on 10 years now, even. If anything though, then I'd guess that it's become cheaper over time, not more expensive.

Re: Visa Advertising Solutions (VAS) Opt Out

#69

Post by earthboundkid »

vageli wrote: post #33
bitexploder wrote: post #19

Earlier quoted context omitted.

You would hope that. I’ve been in infosec doing application security as a consultant a long time. Developers have often destroyed my hopes :)

> You would hope that. I’ve been in infosec doing application security as a consultant a long time. Developers have often destroyed my hopes :) I used to work at a big bank in the US and the parent's description sounds exactly like how it would work.

Government and banks have been continuously using computers since the 60s, so as a result there’s a lot of “fancy web API to collect data… that gets batch processed by an ETL on a mainframe overnight.” Much more of it than I realized as a young dev at least.

Re: Visa Advertising Solutions (VAS) Opt Out

#70

Post by BeefySwain »

WaxProlix wrote: post #27
xzel wrote: post #25

Earlier quoted context omitted.

Most open source text captchas have ML/DL or OpenCV OCR solutions and more advanced captchas like gcaptcha/hcaptcha you can send to a solver farm like 2captcha. The cost for the farm solutions is pretty cheap.

I'd only seen relatively pricey solver farm solutions, hence the question. What constitutes "cheap" here? For a baseline, .05USD/captcha seems not cheap to me.

Look again, that is per thousand captchas.

Still pretty expensive if you wanted to do every single Valid CC #, though.

Post reply on HN