Jonathan's Card • Hacker News Board

Re: Jonathan's Card

#121

Post by Klondike » Mon, Aug 08, 2011, 12:24 AM UTC

danielodio wrote: post #107

danielodio wrote: post #106

OK I just tried a test: @Socialize put $49 on the card -- let's see if a smaller amount still tips off the hacker: http://drod.io/2E071F3T0C0V0G1w0f39

the $49 is on there! Someone go buy a latte, quick! http://drod.io/3F0U1n340W1c0H1H0F29

That $49 sparked my walk over to Starbucks on the corner to buy one. (I put $10 on the card last night myself, hadn't used any.) By the time I was halfway there it was gone, and I decided to just buy it anyway, hoping it'd gotten filled but the feed hadn't updated yet -- and the barista gave it to me for free, unprovoked. I didn't even have to present the card.

Re: Jonathan's Card

#122

Post by danielodio » Mon, Aug 08, 2011, 12:24 AM UTC

jonathanstark wrote: post #119

danielodio wrote: post #117

OK I'm going to go nuclear to determine if this is some automated script or a manual hack: @Socialize just put $300 (!!!) on the card (remember... this is to promote the SDK Speed Challenge... so maybe click the link so I can claim some kind of ROI! http://go.GetSocialize.com/SDK-Challenge ) I figure if it's a script, the $300 will disappear instantly. But if it's manual, it's unlikely that someone could manually xfe…

Jonathan here: The card was not hacked. Looks more like you're just trying to promote your link. Thanks though. Cheers! j

Jonathan, re: not hacked -- do you think people are really spending exactly $45 at Starbucks in one shot?

Re: Jonathan's Card

#123

Post by [deleted] » Mon, Aug 08, 2011, 12:26 AM UTC

jonathanstark wrote: post #119

danielodio wrote: post #117

OK I'm going to go nuclear to determine if this is some automated script or a manual hack: @Socialize just put $300 (!!!) on the card (remember... this is to promote the SDK Speed Challenge... so maybe click the link so I can claim some kind of ROI! http://go.GetSocialize.com/SDK-Challenge ) I figure if it's a script, the $300 will disappear instantly. But if it's manual, it's unlikely that someone could manually xfe…

Jonathan here: The card was not hacked. Looks more like you're just trying to promote your link. Thanks though. Cheers! j

[deleted]

Re: Jonathan's Card

#124

Post by michaelschade » Mon, Aug 08, 2011, 12:26 AM UTC

danielodio wrote: post #122

jonathanstark wrote: post #119

Earlier quoted context omitted.

Jonathan here: The card was not hacked. Looks more like you're just trying to promote your link. Thanks though. Cheers! j

Jonathan, re: not hacked -- do you think people are really spending exactly $45 at Starbucks in one shot?

See http://news.ycombinator.com/item?id=2858228

Re: Jonathan's Card

#125

Post by funthree » Mon, Aug 08, 2011, 12:27 AM UTC

jonathanstark wrote: post #119

danielodio wrote: post #117

OK I'm going to go nuclear to determine if this is some automated script or a manual hack: @Socialize just put $300 (!!!) on the card (remember... this is to promote the SDK Speed Challenge... so maybe click the link so I can claim some kind of ROI! http://go.GetSocialize.com/SDK-Challenge ) I figure if it's a script, the $300 will disappear instantly. But if it's manual, it's unlikely that someone could manually xfe…

Jonathan here: The card was not hacked. Looks more like you're just trying to promote your link. Thanks though. Cheers! j

Do you mind releasing the transaction data available? The card went from $100 to $0 within moments a number of times.

Re: Jonathan's Card

#126

Post by danielodio » Mon, Aug 08, 2011, 12:27 AM UTC

danielodio wrote: post #122

jonathanstark wrote: post #119

Earlier quoted context omitted.

Jonathan here: The card was not hacked. Looks more like you're just trying to promote your link. Thanks though. Cheers! j

Jonathan, re: not hacked -- do you think people are really spending exactly $45 at Starbucks in one shot?

@michaelschade that's my point exactly: $45 was removed and $4 was left on the card: http://twitter.com/#!/jonathanscard/status/10035604975584460...

So someone either bought exactly $45 worth of Starbucks on the card within minutes of me putting $49 on it, or someone is hacking it.

Re: Jonathan's Card

#127

Post by funthree » Mon, Aug 08, 2011, 12:29 AM UTC

jonathanstark wrote: post #118

hassanhassan wrote: post #105

Earlier quoted context omitted.

You could be right, since something similar did take place as can be confirmed in one of the posts below (a large purchase for the homeless). But certainly we can agree that $15, $30, and $100 being drained in minutes to the exact penny must be cause for concern. Edit: draining to $0.00 is OK, as jonathan explains below.

Jonathan here: Draining the card to the penny is not weird. If there is $10 on the card and your purchase is $11.50, $10 will be removed from the card and you have to pay the remaining $1.50 some other way. Expected behavior :) j

There is at least two cases that this doesnt explain.

http://twitter.com/#!/jonathanscard/status/10034195955777536...

http://twitter.com/#!/jonathanscard/status/10035604975584460...

edit: now at least 5, see above

Re: Jonathan's Card

#128

Post by lurker19 » Mon, Aug 08, 2011, 12:33 AM UTC

snprbob86 wrote: post #58

pangram wrote: post #4

Whenever I go through a toll bridge, I frequently pay the toll of the person behind me. I've sometimes wondered if it propagates backward at all. For the Starbucks card, I would love to live in a society where this could work. Unfortunately it's one of those things where one anonymous bad egg will ruin (i.e., drain the account) for everyone else. Some way to restrict it to a community with less anonymity would help (…

> I frequently pay the toll of the person behind me In what country/state/city? Is that legal? In most (all?) US cities, it is illegal to fill other peoples' parking meters because that robs the city of fines. But maybe it's not a concern for tolls? > I've sometimes wondered if it propagates backward at all. At most, it would only reach exactly the car behind you. If that driver decides to pay the toll anyway (or the…

Don't be silly.

Refilling a meter to circumvent the time limit or cover up a violation is illegal in some jurisdictions.

Paying someone else's bill is not illegal.

Re: Jonathan's Card

#129

Post by danielodio » Mon, Aug 08, 2011, 12:34 AM UTC

jonathanstark wrote: post #119

danielodio wrote: post #117

OK I'm going to go nuclear to determine if this is some automated script or a manual hack: @Socialize just put $300 (!!!) on the card (remember... this is to promote the SDK Speed Challenge... so maybe click the link so I can claim some kind of ROI! http://go.GetSocialize.com/SDK-Challenge ) I figure if it's a script, the $300 will disappear instantly. But if it's manual, it's unlikely that someone could manually xfe…

Jonathan here: The card was not hacked. Looks more like you're just trying to promote your link. Thanks though. Cheers! j

@jonathanstark someone is totally hacking your card: http://twitter.com/#!/jonathanscard/status/10036286052539596...

Re: Jonathan's Card

#130

Post by lurker19 » Mon, Aug 08, 2011, 12:37 AM UTC

danielodio wrote: post #98

funthree wrote: post #93

Earlier quoted context omitted.

I think someone could have bought a SBux card with it. Looks like it has happened at least a few times now all within less than a minute or two of the balance being there. An employee or someone camping a store, perhaps... Is it possible to use the number to buy a card off their website online?

I'll be willing to put another $100 on the card on behalf of @Socialize's SDK Speed Challenge ( http://go.GetSocialize.com/SDK-Challenge ) if someone can come up with a way to track who's hacking it. Any ideas?

How is this post not spam?