Live data from Hacker News

Pin is Australia’s first all-in-one payment API

pin.net.au

51–60 of 97 posts

Re: Pin is Australia’s first all-in-one payment API

#51
post #40

Earlier quoted context omitted.

Would you mind elaborating? ssltrip requires a valid root ca, or an ssl library that doesn't check the signing chain. After using it though, the parameters are unencrypted and so can simply be sniffed. Are you attempting to reencrypt the parameters with another key? If so then why run that through https?

> Are you attempting to reencrypt the parameters with another key? If so then why run that through https? I think they are talking about generating a hash from all of the parameters in the request + a secret, pre-shared key. Doing so prevents MITM attacks from changing the parameters. IIRC, Amazon does this (among many others).

Exactly. Have a look here for some information on how to do this: http://www.thebuzzmedia.com/designing-a-secure-rest-api-with...

Re: Pin is Australia’s first all-in-one payment API

#53
post #29

OMFG THANKYOU!!! We've been ridiculously disadvantaged with no Stripe, Dwolla, WePay, Square etc. So many startups have been launched and funded (in the states) that were possible primarily due to Stripe integration. Not much of a choice here other than PayPal.

None of the other services you listed have a monthly fee. But I guess we Australians should be used to being ripped off by now.

"But I guess we Australians should be used to being ripped off by now" With such a "dog beaten" attitude I'd say it's self fulfilling. Perhaps wait to see what those fees are, relative to your other options in Australia, before drawing such a depressing conclusion?

Re: Pin is Australia’s first all-in-one payment API

#59
post #57

What are the fees? Does it work in New Zealand?

+1 there's absolutely no reason why they cannot get it working for New Zealand -- considering most of our banks are actually owned by Australians, and typically use the same systems!

++ - to note though, it won't be a computational problem, but one to do with regulation, I would love to not have to deal with DPS and BNZ though.

Re: Pin is Australia’s first all-in-one payment API

#60
post #47

Can someone explain why a separate payment system is needed for Australian developers? My nieve understanding is that credit cards are global from a consumer perspective (i.e. a credit card will work in any country in the world). Are things different from a developer perpective? If so, why?

Are things different from a developer perpective? If so, why?

Broadly speaking, because the credit card industry is a massive, bloated, inefficient mess, and the effort and liability required for a small business to participate in that mess directly can literally be business-destroying. And that's assuming the Powers That Be graciously allow you to play their little game at all, which may take several weeks of approval process to decide, and will almost certainly come with silly levels of fees on each transaction and terms so one-sided they could right a sinking ship even if you do jump through all of their hoops.

Having an intermediary that can provide a simple API that just works instead of having to integrate with some absurdly complicated and poorly documented API offered directly by the big players can save weeks of hassle. Similarly, having an intermediary that can take care of compliance with the dreaded PCI DSS (the industry security standards) is also a huge win. Finally, because the intermediaries tend to be bigger fish in the pond, you will often get a significantly better deal out of them in terms of how quickly you get your money, and how much of your money you actually get to keep.

All of this is particularly true for start-ups with no trading history, which of course will include just about any new on-line business. Once you've got a proven track record you can give solid answers to the financial questions and actually make the big boys compete for your business as they should, at least to some extent, but if you're starting from zero then the first thing a lot of these companies see is a huge potential fraud risk, particularly if you're in any kind of "dubious" industry or, again like many on-line SaaS businesses, you want to use a continuous payment authority to take recurring payments from a customer's card and not just a one-off transaction.

Unfortunately, there has to be some sort of big player on the other side of any intermediary (or, possibly, several big players used for different kinds of transaction) and so it's not unusual for these intermediaries either to be limited in geographic scope or to provide a partial service but still require you to sort out your own connections with a payment gateway and/or merchant account based in your region (though the intermediaries will probably be able to help with that process, which is still better than nothing). Thus while the US appears to have an effective and fast-growing young industry in payment processing services, those of us in other regions can only look on with jealousy and bow down before the mighty PayPal/Google/other vast multinational with a self-contained payment service.

Post reply on HN