141–150 of 253 posts
Earlier quoted context omitted.
The site is already marketingreportoptout. visa.com . How would your random link add anything?
The "random link" is on a domain that the Wayback machine has back to 2001. Whereas the marketingreportoptout subdomain doesn't appear to be there at all. I could certainly imagine a compromise where somebody who doesn't have access to the main sites still manages to sneak in a plausible-sounding subdomain.
Earlier quoted context omitted.
Not sure what you meant, but you buy data like that based on airport codes, dates, frequency, and tier (like top 10% of spenders). I’ve only used visa data for targeted advertising. Like tourism destinations target people who are flying to their destination in the near future.
What data do you get on each person who matches the query?
Much of this buying and selling of data within the paid advertising industry hides in plain sight because it goes by so many names - contextual targeting, relevancy data, media enrichment, lead enhancement, blah blah blah...
Earlier quoted context omitted.
Anyone have one for Amex? Or Discover? (or JCB? What other weird cards do HN users even have?)
For Amex, I found this: https://global.americanexpress.com/account-management/privac... (Maybe the checkbox at the bottom does a similar thing)
I did manage to find this (https://optout.aboutads.info/?c=3&lang=en) which they claim to honour.
I probably should be purging cookies more often :/
Earlier quoted context omitted.
I believe it is the standard free level, "Universal SSL" cert that Cloudflare will provide sites on free tier, if they opt for proxying through Cloudflare.
So all credit card numbers submitted by the form are viewable by Cloudflare? That does not inspire confidence
Cardholder agreements for credit cards typically say that you aren’t liable for any fraudulent charges so long as you report them within a couple of billing cycles. I once had my credit card number stolen, called the bank to report it, and they reversed the charge and sent me a new card via FedEx Express. The whole process took less than ten minutes.
What don’t I know? Is it just that when companies emphasise “no credit card information was stolen” in their data breach announcements that this gives a false impression that this data is more important to keep secret, or what?
Earlier quoted context omitted.
2captcha is about 0.0005/solve, give or take do to their failure rate. There are other services as well and pre-paid bulk purchases lead to lower pricing. I wouldn't want to ballot stuff the crazy number that is the combination of all Visa credit cards but for much smaller problem spaces 2captcha and others are very reasonably priced.
I would easily pay 0.0005 per solve if it meant I don't have to deal with a captcha again when browsing.
Wasn't something I mentioned earlier but using the reCAPTCHA audio is also another solution for gcap. I haven't ever used it personally but always seemed like a cool idea.
Earlier quoted context omitted.
Your credit card mostly on gets merchant name and total purchase value, so the uses are fairly niche. It’s more likely merchants themselves indirectly selling your purchase data. You can sometimes click the small blue triangle in the corner of an ad (called adchoices) to see how it was targeted.
If I recall correctly, when I worked on ecommerce payment processing several years ago, the payment processor got a full itemized list for each transaction. Another comment here mentioned airport codes for airfares ( https://news.ycombinator.com/item?id=25577366 ).
Stripe/etc definitely get itemized, but credits cards get less as far as I know.
Earlier quoted context omitted.
What data do you get on each person who matches the query?
Often you get the data in aggregate, bought and sold as an “audience”. It’s a Boolean flag if a person in the audience. Basically an array of IDs for people in the audience (true). Almost always the data seller masks the ID of people in the audience to the buyer. This then creates opportunity for third party “matching services” or “identity resolution” who can de-anonymize, link, and re-anonymize. Link audiences toge…
Any way to verify that this is legitimate and not a phishing page for active card numbers?
Yes, by checking the SSL cert.
Especially since this means anything you submit will be decrypted by Cloudflare. It may then be transmitted in the clear to whoever runs the backend sever that Cloudflare is proxying for.
This is the most dodgy looking “enter your CC info” site to ever exist. I can’t imagine why /s