Live data from Hacker News

Show HN: Card – An interactive CSS3 credit card form

jessepollak.github.io

51–60 of 117 posts

Re: Show HN: Card – An interactive CSS3 credit card form

#52

Looks gorgeous. I can't help but wonder if people unfamiliar with technology and ecommerce would be deterred by such a form? It might give some users the impression that the website is "copying" the credit card. It would be interested to test the opinions of non-tech savvy users.

Same thoughts!

Re: Show HN: Card – An interactive CSS3 credit card form

#53

It doesn't seem to be working to tab between fields in Chrome. Once I've entered the expiration date it just fails to go to CVC or let me tab into it. had to use the mouse to switch fields.

It is validating that the card is in date, if you enter a date that is in the future, it will let you tab to the ccv field.

Re: Show HN: Card – An interactive CSS3 credit card form

#55

Looks gorgeous. I can't help but wonder if people unfamiliar with technology and ecommerce would be deterred by such a form? It might give some users the impression that the website is "copying" the credit card. It would be interested to test the opinions of non-tech savvy users.

Same here, I mean if I saw this on my paypal account I would kind of worried, looks too "flashy".

But it looks gorgeous for sure and it's probably part of the future.

Re: Show HN: Card – An interactive CSS3 credit card form

#56

FWIW, Chrome blocked your calls to load various JS and CSS files from Yandex because you used HTTP, not HTTPS.

Yep, example does not work for HTTPS users of GitHub. I use HTTPS everywhere, so I'm always defaulted to HTTPS where available.

And in this case, where not available as well.

Re: Show HN: Card – An interactive CSS3 credit card form

#57
I really want to like this because the design and functionality of is very cool. Like others I tried to start typing on the card so there is definitely an element of confusion that isn't there with a normal form. The last place I want to risk any confusion is the stage at which the customer is trying to pay me! A variation of this where you could type on the card might be interesting.

Re: Show HN: Card – An interactive CSS3 credit card form

#58

Looks gorgeous. I can't help but wonder if people unfamiliar with technology and ecommerce would be deterred by such a form? It might give some users the impression that the website is "copying" the credit card. It would be interested to test the opinions of non-tech savvy users.

I don't know about people unfamiliar with technology, but as someone very familiar with technology, my first thought is that this could easily be a vector for copying the card information! All you need is to load some encoded image off of a third server to leak card info via a side channel, if your code is underhanded. I would trust "one line of code" if it's a solution from Google or something, but for something thi…

Well, of course untrusted code dealing with CC info is insecure. That's why this is open source, and you host it yourself. It's just a library. Whose source you can see. Whose source you can compile. With a third-party compiler.

You'd say you'd trust it if it was from Google - in this case, if you use it, it's coming from you, on your server, under your control. I'd trust this far more than a Google-hosted closed-source library - not because I wouldn't trust a Google payment endpoint, but because this is totally under my control, and something from Google isn't.

Not sure what you're talking about with the encoded image. Doesn't make much sense.

There are no real security problems with this whatsoever. The problem is, unsavvy users may think there is, due to the visual resemblance of the onscreen card.

Re: Show HN: Card – An interactive CSS3 credit card form

#59
post #4

This looks great, but any code that attempts to guess the card type using the first few numbers always makes me nervous

He's not really "guessing" the card type, there's a pretty standard algorithm called the Luhn Algorithm that all credit card companies use when issuing their cards.

The algorithm is public domain and all it does is tell you who issued the card which doesn't seem like an issue to me

Post reply on HN