Live data from Hacker News

Visa Advertising Solutions (VAS) Opt Out

marketingreportoptout.visa.com

21–30 of 253 posts

Re: Visa Advertising Solutions (VAS) Opt Out

#23

The form doesn't require any sort of authentication, so I imagine someone could write a script to submit all (or a large portion of) the set of card numbers to this API. Might need to work around rate limiting and so on, but seems feasible?

There's an unspoken assumption here and elsewhere that the captcha doesn't present any kind of difficulty at all; is that true? If so, why?

Re: Visa Advertising Solutions (VAS) Opt Out

#25

The form doesn't require any sort of authentication, so I imagine someone could write a script to submit all (or a large portion of) the set of card numbers to this API. Might need to work around rate limiting and so on, but seems feasible?

There's an unspoken assumption here and elsewhere that the captcha doesn't present any kind of difficulty at all; is that true? If so, why?

Most open source text captchas have ML/DL or OpenCV OCR solutions and more advanced captchas like gcaptcha/hcaptcha you can send to a solver farm like 2captcha. The cost for the farm solutions is pretty cheap.

Re: Visa Advertising Solutions (VAS) Opt Out

#27
post #25

Earlier quoted context omitted.

There's an unspoken assumption here and elsewhere that the captcha doesn't present any kind of difficulty at all; is that true? If so, why?

Most open source text captchas have ML/DL or OpenCV OCR solutions and more advanced captchas like gcaptcha/hcaptcha you can send to a solver farm like 2captcha. The cost for the farm solutions is pretty cheap.

I'd only seen relatively pricey solver farm solutions, hence the question. What constitutes "cheap" here? For a baseline, .05USD/captcha seems not cheap to me.

Re: Visa Advertising Solutions (VAS) Opt Out

#28
post #8

So all I need to do is provide my full credit card number in this random page and then it'll opt me out? And this was somehow brought to the front page of Hacker News? This is a very low effort scam. At least put in some effort beyond your dozen shadow accounts on HN.

Domain and cert are visa. So at least you know you are talking to Visa so it’s not really entirely random.

Technically to someone who has demonstrated control on visa.com at the time the cert was issued. It doesn't necessarily mean its actually visa.com.

Although I didn't check to see if they're using OV or EV certs.

Re: Visa Advertising Solutions (VAS) Opt Out

#29

So all I need to do is provide my full credit card number in this random page and then it'll opt me out? And this was somehow brought to the front page of Hacker News? This is a very low effort scam. At least put in some effort beyond your dozen shadow accounts on HN.

In addition to domain+cert verification, you can type in "visa.com", scroll down to the footer, click "Privacy", scroll down to and click the "Visit Additional Privacy Information" button, then read the last paragraph of the second-to-last question, which links to this same page.

Re: Visa Advertising Solutions (VAS) Opt Out

#30
post #8

So all I need to do is provide my full credit card number in this random page and then it'll opt me out? And this was somehow brought to the front page of Hacker News? This is a very low effort scam. At least put in some effort beyond your dozen shadow accounts on HN.

Domain and cert are visa. So at least you know you are talking to Visa so it’s not really entirely random.

I'm surprised Visa is using cloudflare for their certs.
Post reply on HN