Live data from Hacker News

Innovation Nation: WePay is the anti-PayPal

money.cnn.com

31–40 of 54 posts

Re: Innovation Nation: WePay is the anti-PayPal

#31

I really hope WePay destroys PayPal. They have screwed myself and my friends too many times. The homepage layout is all wrong though. Poor element placement, messy typography, and the color scheme is off. It looks amateur and unpolished. All those SEO'd subpages are worthless if they don't convert. Also: - Upgrade to Nginx 0.7.67, there was a lot of bug fixes in 0.7.65 and 0.7.66. - Limit the number of login attempts…

Don't host JS on Google? Do you mean libraries like jQuery? I'm curious because we use Google for jQuery and a few other libraries. I've never heard this to be a security issue, and I'm not entirely sure how it would be. Nonetheless, security is all about cost-benefit, it may be worth the security risk for the page load speed increase with Google.

Re: Innovation Nation: WePay is the anti-PayPal

#32
post #27

I really hope WePay destroys PayPal. They have screwed myself and my friends too many times. The homepage layout is all wrong though. Poor element placement, messy typography, and the color scheme is off. It looks amateur and unpolished. All those SEO'd subpages are worthless if they don't convert. Also: - Upgrade to Nginx 0.7.67, there was a lot of bug fixes in 0.7.65 and 0.7.66. - Limit the number of login attempts…

thanks for the feedback! can you be more specific about how we can improve the home page? we're constantly trying to improve it, but our oldest (and admittedly ugliest) one always converts the best. tell me the dominant page color and i'll know which version you're looking at.

White and blue are good colors for your industry, but the current homepage has too much blue above the fold. The blue is slightly too vibrant also. You want to be careful about the saturation of your colors. Vibrant/Saturated colors are subconsciously distracting and unprofessional. The hurdle to trust a vibrant website is much higher.

"WePay helps you collect, manage, and spend money." should be displayed above the fold and have embedded screenshots or an embedded video nearby. I don't recommend popping it up in a lightbox.

Include a "create account" link near your "Sign in" link. The top right corner is prime real estate and needs a call-to-action for current users and potential users.

The site seems segmented because of the various different styles and content widths used. I found three different widths so far (1010px, 960px, and 770px).

The logo needs to go. It's really bad.

Move "featured in" to the bottom.

Move "What kinds of groups are using WePay?" up more. Remove the italics on the links.

Take a look at this: http://i.imgur.com/4zHX7.png - I threw it together in 5 minutes, so don't judge it too much. White is the primary color here and you'll notice that it is visually easy to follow. Looking at the current WePay is actually straining on the eyes.

Re: Innovation Nation: WePay is the anti-PayPal

#33
post #27

Earlier quoted context omitted.

thanks for the feedback! can you be more specific about how we can improve the home page? we're constantly trying to improve it, but our oldest (and admittedly ugliest) one always converts the best. tell me the dominant page color and i'll know which version you're looking at.

White and blue are good colors for your industry, but the current homepage has too much blue above the fold. The blue is slightly too vibrant also. You want to be careful about the saturation of your colors. Vibrant/Saturated colors are subconsciously distracting and unprofessional. The hurdle to trust a vibrant website is much higher. "WePay helps you collect, manage, and spend money." should be displayed above the…

i really like the suggestion to add "Create Account" next to "Sign In". i'll see about getting that in sometime soon.

cool mockup. perhaps we'll try it out and see how the conversions look.

thanks!

Re: Innovation Nation: WePay is the anti-PayPal

#34
post #26
post #16

Earlier quoted context omitted.

Wow, "ssh wepay.com" works. Turn that off. Once again, "cloud" doesn't mean "lol, we don't need to know about servers!"

Thanks for catching that. We've spent the last week moving into a new office and it must have slipped by as we were getting everything reconfigured. It's been locked down again.

You guys run your servers out of your offices?

Re: Innovation Nation: WePay is the anti-PayPal

#35
post #22
post #16

Earlier quoted context omitted.

Wow, "ssh wepay.com" works. Turn that off. Once again, "cloud" doesn't mean "lol, we don't need to know about servers!"

I must admit I didn't know the big domains disabled ssh. Naive/beginner's question: how do programmers work remotely at these companies (if it's allowed at all)? Do they ssh into other (safe) servers, from which a safe transfer is eventually made into the production servers?

Generally you VPN in (using two-factor auth for PCI compliance) to a private network and can SSH in from there. Public facing SSH is generally a bad idea. Also it didn't seem like they had any firewall rules preventing brute forcing.

Re: Innovation Nation: WePay is the anti-PayPal

#36
post #34
post #26

Earlier quoted context omitted.

Thanks for catching that. We've spent the last week moving into a new office and it must have slipped by as we were getting everything reconfigured. It's been locked down again.

You guys run your servers out of your offices?

A quick traceroute would tell you that they don't. He probably meant the source ip range for restricting access changed due to the office move.

Re: Innovation Nation: WePay is the anti-PayPal

#37

I really hope WePay destroys PayPal. They have screwed myself and my friends too many times. The homepage layout is all wrong though. Poor element placement, messy typography, and the color scheme is off. It looks amateur and unpolished. All those SEO'd subpages are worthless if they don't convert. Also: - Upgrade to Nginx 0.7.67, there was a lot of bug fixes in 0.7.65 and 0.7.66. - Limit the number of login attempts…

Don't host JS on Google? Do you mean libraries like jQuery? I'm curious because we use Google for jQuery and a few other libraries. I've never heard this to be a security issue, and I'm not entirely sure how it would be. Nonetheless, security is all about cost-benefit, it may be worth the security risk for the page load speed increase with Google.

It's a security issue because someone can compromise google's CDN, or cache poison, or DNS poison/hijack that, and can inject malicious JS code into a large number of websites with one attack. If you're running a payment related it pays to be paranoid.

Re: Innovation Nation: WePay is the anti-PayPal

#38
post #25
post #22

Earlier quoted context omitted.

I must admit I didn't know the big domains disabled ssh. Naive/beginner's question: how do programmers work remotely at these companies (if it's allowed at all)? Do they ssh into other (safe) servers, from which a safe transfer is eventually made into the production servers?

It's a matter of setting up VPNs and IP-restricting where you can SSH in from. You can also set up port knocking and other SSH-related security measures. It depends how much convenience you're willing to trade for security.

Practicality trumps everything, after 10+ years of using ssh and trying port knocking and everything else none of it works when you're 4000km away in another country with only a handheld to access the servers.

Re: Innovation Nation: WePay is the anti-PayPal

#39
post #25

Earlier quoted context omitted.

It's a matter of setting up VPNs and IP-restricting where you can SSH in from. You can also set up port knocking and other SSH-related security measures. It depends how much convenience you're willing to trade for security.

Practicality trumps everything, after 10+ years of using ssh and trying port knocking and everything else none of it works when you're 4000km away in another country with only a handheld to access the servers.

I think it should probably company policy at a financial institution not to allow someone in a different control on a handheld device to access the servers.

Re: Innovation Nation: WePay is the anti-PayPal

#40

I really hope WePay destroys PayPal. They have screwed myself and my friends too many times. The homepage layout is all wrong though. Poor element placement, messy typography, and the color scheme is off. It looks amateur and unpolished. All those SEO'd subpages are worthless if they don't convert. Also: - Upgrade to Nginx 0.7.67, there was a lot of bug fixes in 0.7.65 and 0.7.66. - Limit the number of login attempts…

> - Don't show "That email address was not found" when someone tries to recover a password. You are giving out too much info, which can be used maliciously.

Does this really matter if a site only allows 1 registered user per email address? I can farm this information by trying to sign up a new account.

Post reply on HN