Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pin is Australia’s first all-in-one payment API

pin.net.au

Post reply on HN
Print view View original

71–80 of 97 posts

Re: Pin is Australia’s first all-in-one payment API

#71

Post by brycecammo »

noveltyaccount wrote: post #64
mattmanser wrote: post #22

Something sticks out like a sore thumb in that API. Where's the param signing with a secret key?

I was thinking about this too--what access does that API key give someone? Even if it's just to charge a card, it's a risk since it can be used by bad people to validate stolen credit cards. Either I put my secret key in the javascript and initiate the request in the browser (thus leaking my secret key), or I accept the inputs onto my server and forward the request to Pin, thus increasing PCI compliance burden becaus…

It looks like they provide pin.js so that your server never has to accept the credit card details, but rather a single-use token (much like Stripe, I believe).

https://pin.net.au/docs/pin_js

Re: Pin is Australia’s first all-in-one payment API

#72

Post by toast76 »

jbrendel wrote: post #48

I'll say "thank you" after I know more about the pricing and fees and how long it will take before my money appears in my bank account. It's great that you are setting up something like this and I really hope for the best. Would love to use it, but as others have commented, down here we are used to being ripped off, so when I see "monthly charges", I'm already a bit weary. Still hopeful, but a bit concerned. Also, I…

$50/month 3.0% + 50c per transaction https://pin.net.au/pricing

Re: Pin is Australia’s first all-in-one payment API

#73

Post by damian2000 »

toast76 wrote: post #72
jbrendel wrote: post #48

I'll say "thank you" after I know more about the pricing and fees and how long it will take before my money appears in my bank account. It's great that you are setting up something like this and I really hope for the best. Would love to use it, but as others have commented, down here we are used to being ripped off, so when I see "monthly charges", I'm already a bit weary. Still hopeful, but a bit concerned. Also, I…

$50/month 3.0% + 50c per transaction https://pin.net.au/pricing

OMFG the fees are the same as the big banks, wrapped in a nicer API.

Suddenly PayPal looks attractive again @ 2.4% + 30c with no monthly fee. https://www.paypal-australia.com.au/business/manage-my-payme...

Re: Pin is Australia’s first all-in-one payment API

#74

Post by nathan_f77 »

veb wrote: post #57
PostOnce wrote: post #24

What are the fees? Does it work in New Zealand?

+1 there's absolutely no reason why they cannot get it working for New Zealand -- considering most of our banks are actually owned by Australians, and typically use the same systems!

That's great to hear! I'm a NZ developer, and this would be a pretty big incentive to get a few of my small startup ideas off the ground. Paypal sucks.

Re: Pin is Australia’s first all-in-one payment API

#75

Post by cynix »

jusben1369 wrote: post #53
cynix wrote: post #29

Earlier quoted context omitted.

None of the other services you listed have a monthly fee. But I guess we Australians should be used to being ripped off by now.

"But I guess we Australians should be used to being ripped off by now" With such a "dog beaten" attitude I'd say it's self fulfilling. Perhaps wait to see what those fees are, relative to your other options in Australia, before drawing such a depressing conclusion?

I know this is likely going to be better than "other options in Australia", and I respect their efforts for making this happen, but that's not my point. I was comparing "options in Australia" to "options in the rest of the world".

The same happens with a lot of different things, such as the cost of computer hardware/software, furniture/home appliances, cars, etc. Occasionally it's possible to work around it: I buy most of my gadgets from Amazon or other US/EU online retailers, and even with international shipping it's cheaper than buying locally. Unfortunately we often get hit hard on the larger, more expensive items that are impractical to import: IKEA furnitures cost 3x as much as in the US, cars 2x as much.

Re: Pin is Australia’s first all-in-one payment API

#76

Post by sjwright »

grecy wrote: post #61
10dpd wrote: post #47

Can someone explain why a separate payment system is needed for Australian developers? My nieve understanding is that credit cards are global from a consumer perspective (i.e. a credit card will work in any country in the world). Are things different from a developer perpective? If so, why?

> My nieve understanding is that credit cards are global from a consumer perspective (i.e. a credit card will work in any country in the world). As someone who has credit cards from 3 different countries, I can tell you that's very wrong. I'd like to think my CC works anywhere, but oftentimes when they ask for a ZIP and I don't have one, that's a deal breaker. Sometimes when the person sees the card is from another c…

Visa provides a transactions gateway, your bank is responsible for providing the line of credit.

Re: Pin is Australia’s first all-in-one payment API

#77

Post by noveltyaccount »

brycecammo wrote: post #71
noveltyaccount wrote: post #64

Earlier quoted context omitted.

I was thinking about this too--what access does that API key give someone? Even if it's just to charge a card, it's a risk since it can be used by bad people to validate stolen credit cards. Either I put my secret key in the javascript and initiate the request in the browser (thus leaking my secret key), or I accept the inputs onto my server and forward the request to Pin, thus increasing PCI compliance burden becaus…

It looks like they provide pin.js so that your server never has to accept the credit card details, but rather a single-use token (much like Stripe, I believe). https://pin.net.au/docs/pin_js

Oh, that's cool, thanks for the docs link. I like the way the API hijacks the form submit and replaces the card with the token. I'm still a but curious as to what a nefarious user could do with your "publishable API key," but this is much better than I had initially thought.

Re: Pin is Australia’s first all-in-one payment API

#79

Post by barkmadley »

davidlumley wrote: post #70
cynix wrote: post #29

Earlier quoted context omitted.

None of the other services you listed have a monthly fee. But I guess we Australians should be used to being ripped off by now.

I'm very interested to understand why they have a monthly fee - surely having an easy to implement payment API would mean AU developers flock to it given our lacklustre other choices?

The size of the market probably dictates the additional fee (at least for now).

Re: Pin is Australia’s first all-in-one payment API

#80

Post by brycecammo »

noveltyaccount wrote: post #77
brycecammo wrote: post #71

Earlier quoted context omitted.

It looks like they provide pin.js so that your server never has to accept the credit card details, but rather a single-use token (much like Stripe, I believe). https://pin.net.au/docs/pin_js

Oh, that's cool, thanks for the docs link. I like the way the API hijacks the form submit and replaces the card with the token. I'm still a but curious as to what a nefarious user could do with your "publishable API key," but this is much better than I had initially thought.

> I'm still a but curious as to what a nefarious user could do with your "publishable API key,"

I suspect very little if they don't also have your 'secret' API key. I guess they could request a single-use token for a card, but I don't think they could then do anything with it.

Post reply on HN