Live data from Hacker News

Show HN: Card – An interactive CSS3 credit card form

jessepollak.github.io

71–80 of 117 posts

Re: Show HN: Card – An interactive CSS3 credit card form

#71

Looks gorgeous. I can't help but wonder if people unfamiliar with technology and ecommerce would be deterred by such a form? It might give some users the impression that the website is "copying" the credit card. It would be interested to test the opinions of non-tech savvy users.

I don't know about people unfamiliar with technology, but as someone very familiar with technology, my first thought is that this could easily be a vector for copying the card information! All you need is to load some encoded image off of a third server to leak card info via a side channel, if your code is underhanded. I would trust "one line of code" if it's a solution from Google or something, but for something thi…

Because you couldn't just generate a similar image on the server-side if you're already asking for that information?

Re: Show HN: Card – An interactive CSS3 credit card form

#72
Let me be the first to rain on your parade (sorry).

If you're not the merchant of record using this form could very well violate your terms of service for whatever credit card company you have your merchant account with, and/or the IPSP terms of service.

Using this can result in terminating your merchant account or temporary suspension depending on how they take it.

The reason why is that the logo's are only allowed to be used by the merchant of record, for many of the parties interested in that this will be their IPSP. So verify prior to doing this that you actually are allowed to use the card association logos. (And for that matter, that you're authorized to capture the card details!).

Please be careful, if you lose your merchant account it could be a while before you get it back, if ever.

Re: Show HN: Card – An interactive CSS3 credit card form

#75
post #58

Earlier quoted context omitted.

I don't know about people unfamiliar with technology, but as someone very familiar with technology, my first thought is that this could easily be a vector for copying the card information! All you need is to load some encoded image off of a third server to leak card info via a side channel, if your code is underhanded. I would trust "one line of code" if it's a solution from Google or something, but for something thi…

Well, of course untrusted code dealing with CC info is insecure. That's why this is open source, and you host it yourself. It's just a library. Whose source you can see. Whose source you can compile. With a third-party compiler. You'd say you'd trust it if it was from Google - in this case, if you use it, it's coming from you , on your server, under your control. I'd trust this far more than a Google-hosted closed-so…

Because it's open source, we can figure out exactly what's going on. OP brings up the point from the users' perspective and they might not trust an interface that looks this flashy.

Re: Show HN: Card – An interactive CSS3 credit card form

#77
post #36

I see no difference. This error is displayed in my console. ReferenceError: hljs is not defined On line 123. Hope this helps, good luck.

https://camo.githubusercontent.com/312e819c130acb5d17a5a8568...

Same issue here, but that's what it should look like.

Re: Show HN: Card – An interactive CSS3 credit card form

#78
Tab from expiry to cvc doesn't work in the interactive. Other than that, honestly, I was just impressed by the "boring" version. Very tidy form, nice to see a new take on it. Existing cc forms around are seriously painful to use. Really digging the card vendor detection, neat touch.

Re: Show HN: Card – An interactive CSS3 credit card form

#79
post #9

It's confusing because my first instinct was to type my credit card info on the card itself. It took me a few seconds to realize there was a form below it.

I also tried clicking on the card itself. Why not allow that? Otherwise maybe have a hover div to the right of the input fields that only is displayed while any of the credit card fields are active.
Post reply on HN