Live data from Hacker News

A failure of security systems at PayPal is causing concern for German banks

nordbayern.de

141–150 of 222 posts

Re: A failure of security systems at PayPal is causing concern for German banks

#141

What's so specific to German banks ?

Germany seems to actively resist to modernize on all electronic fronts. Banks still charge you for transactions and they take 24hrs plus while in other countries they are free for private accounts and within seconds. This lack on the market has made unregulated services such as PayPal big.

I'm not sure which bank you're using, but even Sparkasse and Commerzbank have long supported free SEPA ICT (and it's becoming mandatory at the end of the year).

Re: A failure of security systems at PayPal is causing concern for German banks

#142
post #128

Earlier quoted context omitted.

front page?

Maybe, but it seems odd that someone would refer to a submission by a numeric ranking that changes constantly.

Hey I’ve seen people use email addresses as unique, immutable identifiers so who knows what crazy thing people will do.

Re: A failure of security systems at PayPal is causing concern for German banks

#143
post #122

Earlier quoted context omitted.

This is an important concept. More you push to zero fraud, the more inconvenience you put on your customer. You can cut bunch of fraud if you only allow shipments to the billing address but then you inconvenience people who want to buy gifts, recently moved or have a vacation home. You can block all traffic from cloud providers but you'll end up blocking outbound proxies for people on military bases or corporate prox…

Personally I'd like to see a move away from just giving your card details to a website and having them charge it for whatever they want. Because it just ends up that stolen details go around and get used for fraud easily. Should be moving to a system where setting up payments with a new provider has them request access to charge you, and then on the bank app you approve it. Australia has this as a fairly new system c…

Brazils pix system as a similar mechanism, where a website can generate a code for payment, that you can copy or scan a qr code into your bank app, and then approve the payment.

Individual merchants barely get any information from you this way, and have no way of even trying to charge you more later.

Re: A failure of security systems at PayPal is causing concern for German banks

#145
post #128

Earlier quoted context omitted.

front page?

Maybe, but it seems odd that someone would refer to a submission by a numeric ranking that changes constantly.

If you wish to refer to the submission uniquely in the subject, as of a few years ago anyways they requested appending ` (1235676423)` to the end of it with the ?id=1235676423 of the comment/post/whatever that you're writing about. I tend to do so more in emails sent from a keyboard than from a mobile phone for UI reasons.

Re: A failure of security systems at PayPal is causing concern for German banks

#146
post #3

German, well West European, banks are slow in creating a competitor to Paypal, called Wero. https://en.wikipedia.org/wiki/Wero_(payment) I'm not implying they block Paypal because of that. It's good to have more competition and I wished my bank would take part.

Wero looks very much like a bureaucratic paper tiger to me. I do not know a single person that uses it despite the massive advertising campaign they are running. What really replaces Paypal in my everyday life is Revolut.

Half of Europe has widely used national systems for instant payments, the other half does not. The idea behind Wero is to unify this to one single system, available across whole Europe. For reference, I use these systems for like 80% of my online payments.

Of course nobody's using Wero now because the whole thing isn't really online yet, just a pilot program on a few websites with a few banks.

Re: A failure of security systems at PayPal is causing concern for German banks

#147
post #122

Earlier quoted context omitted.

This is an important concept. More you push to zero fraud, the more inconvenience you put on your customer. You can cut bunch of fraud if you only allow shipments to the billing address but then you inconvenience people who want to buy gifts, recently moved or have a vacation home. You can block all traffic from cloud providers but you'll end up blocking outbound proxies for people on military bases or corporate prox…

Personally I'd like to see a move away from just giving your card details to a website and having them charge it for whatever they want. Because it just ends up that stolen details go around and get used for fraud easily. Should be moving to a system where setting up payments with a new provider has them request access to charge you, and then on the bank app you approve it. Australia has this as a fairly new system c…

99% of e-commerce merchants don't have hand the credit card informations. Its all passed on the front side by payment providers like Stripe or Braintree. Shopify merchants go further with a hosted payment page. Handling card numbers bring on a lot regulations for PCI.

Re: A failure of security systems at PayPal is causing concern for German banks

#148
post #11
post #3

German, well West European, banks are slow in creating a competitor to Paypal, called Wero. https://en.wikipedia.org/wiki/Wero_(payment) I'm not implying they block Paypal because of that. It's good to have more competition and I wished my bank would take part.

The existing giro system is the real Paypal competitor. Most Europeans had access to Paypal-style money transfers before they had email. Merchants probably want to rely on another party to maintain their integration, but there is no real need for another centralized service similar to Paypal. (The U.S. really is an outlier among developed nations in that its giro system is not widely used, and many residents would no…

For merchants selling stuff internationally on the internet, none of those local systems are any use. You pretty much need to use Paypal or similar - or even wire transfers if you don't mind the delay and inconvenience to the customer.

Re: A failure of security systems at PayPal is causing concern for German banks

#149

Earlier quoted context omitted.

Maybe it’s a better link, but I can only read the content if I accept their sharing my data with 180 partners.

Which is the same as many if not most of the other sites we regularly link to on HN. You just aren't told about it.

If I have to accept it I think that's even worse than doing typical tracking behind my back.

Also requiring acceptance from EU users would be a GDPR violation, I think? But it didn't ask me at all so I can't evaluate it well.

Re: A failure of security systems at PayPal is causing concern for German banks

#150
post #142
post #128

Earlier quoted context omitted.

Maybe, but it seems odd that someone would refer to a submission by a numeric ranking that changes constantly.

Hey I’ve seen people use email addresses as unique, immutable identifiers so who knows what crazy thing people will do.

Okay, I guess. Half of that is a far more understandable mistake, and the other half makes things easier for everyone.
Post reply on HN