Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

What’s going on with security at PayPal?

christianvarga.com

Post reply on HN
Print view View original

91–100 of 103 posts

Re: What’s going on with security at PayPal?

#91

Post by zeroclip »

hnaccount_rng wrote: post #60
JonathanBeuys wrote: post #49

Earlier quoted context omitted.

For the average use "handle a private key" just means installing an app. If crypto currencies were popular enough, it would already come with a phone, just like a browser. People already keep super important stuff on their phones. Their email accounts, their lifetimes photos, their contacts, their notes... Losing those seems to be more dangerous than losing your digital wallet. An event that would be similar to losin…

Loosing my physical wallet will cost me: About a hundred euros (cash), the annoyance of having to get a replacement for the cards: - ID (probably 4 weeks or so and a visit to my Bürgeramt) - Medical Insurance (probably a week and a phone call) - 2 credit cards and a bank card (one, maybe two phone calls and a couple of euros) - a handful of membership cards, non of which are card only and only there for backup to the…

False equivalence. If you lose your crypto hot wallet, you might lose $100 as well. Much less of a hassle than losing your physical wallet with several important credit, debit, health, driver’s, and ID cards.

A hot wallet is meant to be used like cash in your pocket. Putting thousands or millions of dollars in your pocket would be unwise. The same logic should apply to a hot wallet.

You can store higher amount of wealth in a cold wallet, like a multi sig or smart contract wallet that has social recovery and transfer protection.

Re: What’s going on with security at PayPal?

#92

Post by disgruntledphd2 »

2arrs2ells wrote: post #40
byhemechi wrote: post #25

Earlier quoted context omitted.

i've had it like that for months now, maybe it's a geographical thing, for some reason a lot of this stuff comes early to australia?

FB engineer explained they always rolled features out to New Zealand first - similar user behavior as the US but outside the eye of the tech press & smaller market (so less risk).

They actually split Ireland and AU/NZ more recently.

Re: What’s going on with security at PayPal?

#95

Post by noSyncCloud »

JonathanBeuys wrote: post #90
tialaramex wrote: post #86

Earlier quoted context omitted.

By 1989 the Internet's primary applications are email, Usenet news, and the file transfer protocol. Those may not seem like much today, but they're a big deal in 1989.

In crypto, there are payments, store of value, decentralized exchanges, smart contracts, NFTs, DAOs... I tend to think crypto is used more already than the internet was in 1989?

Comparing the internet to crypto is like comparing roads to clown cars.

They are entirely different classes of technology and the second would be completely useless without the first, so like to like comparisons are meaningless.

Re: What’s going on with security at PayPal?

#96

Post by Thorrez »

silisili wrote: post #32
Thorrez wrote: post #29

Earlier quoted context omitted.

The author never says the full number is revealed. The author says the partial number is revealed.

The article has been changed. The word partially was added in the sentence below after I commented. > enter an email address to log into PayPal, an SMS is immediately sent and the phone number is partially revealed. That said, below that it mentioned number guessing so I probably could have guessed that's what they'd meant to write.

Other parts still said partially though. Your comment was left at 4:40 UTC[1]. Here's a snapshot from 4:07 UTC[2]. It says

>PayPal helps them by partially revealing a significant portion of your phone number

>Remember Mat Honan, who’s digital life was destroyed when his iCloud account was wiped in a targeted attack? In that attack, the hacker used social engineering to obtain a partial credit card number from an Amazon employee which Apple then accepted as verification of identity. With PayPal no such social engineering is required; instead revealing half your phone number to anyone who merely enters your email address on the login screen.

>Of course, PayPal also allows users to log in by entering their phone number. Now armed with a partial, a bad actor needs only to enumerate the remaining digits to reveal your full phone number.

[1] https://hacker-news.firebaseio.com/v0/item/32615770.json

[2] https://web.archive.org/web/20220827040709/https://christian...

Re: What’s going on with security at PayPal?

#98

Post by em-bee »

sofixa wrote: post #71
yywwbbn wrote: post #66

Earlier quoted context omitted.

Well in the EU credit/debit card fees are capped at 0.3/0.2% so while not exactly fair it’s not a huge deal compared to the US (where everyone is paying for credit card users rewards and cash backs). AFAIK only SEPA direct debit transfers can be canceled/reversed so normal transfers are still not (easily) reversible.

> Well in the EU credit/debit card fees are capped at 0.3/0.2% so while not exactly fair it’s not a huge deal compared to the US (where everyone is paying for credit card users rewards and cash backs). And cash has it's own processing fees (security - cameras, register, transportation; counting), which are also hidden. Some smaller places (e.g. cafés) have moved to cashless payments only, because the costs around cas…

that is very true, and so often ignored or forgotten

Re: What’s going on with security at PayPal?

#99

Post by sverhagen »

lokedhs wrote: post #83
s_dev wrote: post #68

Earlier quoted context omitted.

Send a GDPR request to delete it to their support.

Thank you. I order to contact support, I had to log in, so I had to use a different account just you be able to ask the question. We'll see what they reply. If this fails, I'll go the GDPR route.

Somehow I feel they will claim that banking regulations around records retention trump GDPR, and that they thus cannot proceed with your request.

Re: What’s going on with security at PayPal?

#100

Post by shakna »

JonathanBeuys wrote: post #90
tialaramex wrote: post #86

Earlier quoted context omitted.

By 1989 the Internet's primary applications are email, Usenet news, and the file transfer protocol. Those may not seem like much today, but they're a big deal in 1989.

In crypto, there are payments, store of value, decentralized exchanges, smart contracts, NFTs, DAOs... I tend to think crypto is used more already than the internet was in 1989?

Minitel was almost universal in France by '89. It might not be the WorldWideWeb, but it was around.

It had instant messaging, 24hr news, business listings, public databases (similar to wikis), online shopping, prostitution, dating services, online games, public transport ticketing, forums, online payment system, and over 25mil individual people using it on a daily basis.

Apart from the customers, it had all of that from _day one_.

Post reply on HN