Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Klarna users are being signed in to random accounts

twitter.com

Post reply on HN
Print view View original

501–510 of 517 posts

Re: Klarna users are being signed in to random accounts

#501

Post by tmk1108 »

vesinisa wrote: post #495
pylon wrote: post #460

Earlier quoted context omitted.

This is one of the reasons I wish governments in the world implement proper digital authentication instead of relying on static identifiers like name, address, or SSN.

Finland offers a state of the art digital authentication system. It's just that Klarna doesn't want to use it because it adds an auhtentication step to their checkout process. It's just easier for them to take the random internet user's word for who they are (!!). I am not sure how this is even legal under the PSD2 in EU. It might not be. But Klarna does not seem to care, and I really hope someone will take them to c…

Is there any pressure in Finland to make this illegal? If your transaction didn't go through the digital authentication to verify identity, then it's worthless and the money can't be collected?

Re: Klarna users are being signed in to random accounts

#502

Post by 2rsf »

OldGoodNewBad wrote: post #499
2rsf wrote: post #478

Earlier quoted context omitted.

we are?

Yes, please examine your nation’s cash situation in 2010 and compare to today. You’re broke, Sven.

Sweden Foreign Exchange Reserves?

https://www.ceicdata.com/en/indicator/sweden/foreign-exchang...

https://www.theglobaleconomy.com/Sweden/reserves/

Re: Klarna users are being signed in to random accounts

#503

Post by vesinisa »

tmk1108 wrote: post #501
vesinisa wrote: post #495

Earlier quoted context omitted.

Finland offers a state of the art digital authentication system. It's just that Klarna doesn't want to use it because it adds an auhtentication step to their checkout process. It's just easier for them to take the random internet user's word for who they are (!!). I am not sure how this is even legal under the PSD2 in EU. It might not be. But Klarna does not seem to care, and I really hope someone will take them to c…

Is there any pressure in Finland to make this illegal? If your transaction didn't go through the digital authentication to verify identity, then it's worthless and the money can't be collected?

Yes, PSD2 (Payment Services Directive vol 2) should require strong customer authentication for online payments throughout EU. How Klarna is able to skirt this regulation is beyond me. Either they've found a loophole in the law or they are already in breach but the financial regulators are holding back from enforcing it.

https://en.wikipedia.org/wiki/Payment_Services_Directive#Rev...

Re: Klarna users are being signed in to random accounts

#504

Post by OldGoodNewBad »

2rsf wrote: post #502
OldGoodNewBad wrote: post #499

Earlier quoted context omitted.

Yes, please examine your nation’s cash situation in 2010 and compare to today. You’re broke, Sven.

Sweden Foreign Exchange Reserves? https://www.ceicdata.com/en/indicator/sweden/foreign-exchang... https://www.theglobaleconomy.com/Sweden/reserves/

No, but you’re getting warm!

Re: Klarna users are being signed in to random accounts

#505

Post by gspr »

timdaub wrote: post #435
gspr wrote: post #349

Earlier quoted context omitted.

I'm sorry about my second paragraph. I'm getting a bit antsy from losing an otherwise intelligent friend to this nonsense.

If you mean me, I've been lost since 2014 to this stuff: Check my CV on my blog: https://timdaub.github.io

No. I don't know you.

Re: Klarna users are being signed in to random accounts

#506

Post by heavenlyblue »

AdamJacobMuller wrote: post #462
sly010 wrote: post #442

Earlier quoted context omitted.

I am not sure this makes sense. Shouldn't Klarna provide proof of the transaction to the court? Won't the court look at it and throw it out as baseless? If Klarna were actually on the hook for their own money, it wold only have to happen a few times before they realize it's not worth it. edit: definitely not a finnish lawyer

> If Klarna were actually on the hook for their own money Aren't they? > it wold only have to happen a few times before they realize it's not worth it That's an assumption. Someone did some A/B testing and said this payment flow results in X% increased sales, resulting in Y% more revenue for Klarna, it results in Z% more fraud. I don't even object to this per-se. If Y is greater than Z, they will do it. If they are e…

> results in Z% more fraud

They would probably not measure fraud but just losses directly.

Re: Klarna users are being signed in to random accounts

#507

Post by beagle3 »

vesinisa wrote: post #491
sly010 wrote: post #442

Earlier quoted context omitted.

I am not sure this makes sense. Shouldn't Klarna provide proof of the transaction to the court? Won't the court look at it and throw it out as baseless? If Klarna were actually on the hook for their own money, it wold only have to happen a few times before they realize it's not worth it. edit: definitely not a finnish lawyer

Problem is the invoice itself is real. You have to contest it actively to the debt collector and give at least some evidence as to why the debt is invalid. If you do not actively contest the collection, it will soon end up in court. This is a very routine case for a district judge where they will give a default judgement in favor of the plaintiff. The problem is that the law in Finland is written so that even if the…

This was probably already common fraud in Finland before Klarna if that’s what the law says - but Klarna would be a crazy force multiplier for the fraudsters and no help for the defrauded, so it becomes a much more pressing issue.

(No knowledge of the details, just speculation based on the discussion here)

Re: Klarna users are being signed in to random accounts

#508

Post by jordanbeiber »

AtNightWeCode wrote: post #474
jordanbeiber wrote: post #424

Earlier quoted context omitted.

They didn’t “create” their own cloud - they wanted to host their own hardware using an api layer to provision resources. That stuff was not built in-house. Manhandled in-house though...

Sebastian used the word cloud when I met him.

Yeah, I actually took part in setting it up with them. It was CloudStack. API layer in front of hypervisors.

Such is the cloud software... :) Cloud, besides APIs, i.e managing hardware at scale was not really what they did.

They did roll 1000s of vms per week through it in ci/cd flows though.

As such it did what it was supposed to do - docker/containers was not a thing at that point in time, and I remember thinking it was pretty awesome.

To many nifty engineers, with long fingers, for their own good though. You need to be strict with automations if you want to keep something like that running reliably over time.

Re: Klarna users are being signed in to random accounts

#510

Post by [deleted] »

rjzzleep wrote: post #463
pylon wrote: post #460

Earlier quoted context omitted.

This is one of the reasons I wish governments in the world implement proper digital authentication instead of relying on static identifiers like name, address, or SSN.

The Baltic states have had proper digital authentication for years. Priv/pub key pair on the Xth iteration digital identity card that is checked against your passport physically. The problem isn't that governments don't have proper digital authentication. It's that most countries want to reinvent it every time. The German version is a clusterfuck that they then had to force into existence by mandating it by law and y…

[deleted]
Post reply on HN