this post was submitted on 02 May 2026
86 points (97.8% liked)

Technology

84376 readers
3354 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
86
Credit Cards Are Vulnerable To Brute Force Kind Attacks (metin.nextc.org)
submitted 3 days ago by Deep@mander.xyz to c/technology@lemmy.world
23 comments fedilink hide all child comments
 

Hacker News.

you are viewing a single comment's thread
view the rest of the comments
[–] BananaTrifleViolin@piefed.world 2 points 3 days ago (1 children)

Do you have basic security like 1 email is a unique account, and the email needs verification before an order can be placed? Because that simple step will be rate limiting for the attackers but normal and expected for real users.

Also could be worth considering using a dedicated payment processor to handle things. It adds overhead, but so does fraud.

[–] Steve@startrek.website -1 points 3 days ago (2 children)

I dont want to add barriers for real orders.

I use both Stripe and Paypal to process cards.

[–] muusemuuse@sh.itjust.works 6 points 3 days ago (1 children)

You don’t want barriers for scammers because they inconvenience real customers. So you choose to enable the scammers. That is exactly why this works.

Thanks for playing.

[–] Steve@startrek.website -1 points 3 days ago (1 children)

I agree. What do you suggest? Just shut it down?

I guess I could move to SantaFe and do something with turquoise.

[–] muusemuuse@sh.itjust.works 8 points 3 days ago (1 children)

People have already given you options and you repeatedly say “nah, that’s inconvenient”. The inconvenience is the point. You are inconveniencing customers who want to get a thing from you and have a reason to endure it to achieve that goal but you are also inconveniencing the scammers who have no goal at the end so…

Fuck it. Have fun in Santa Fe. Save me a seat and some tequila.

[–] Steve@startrek.website 2 points 3 days ago (1 children)

I feel like the card processors should bear this responsibility. I dont have the technical skill to apply most of the suggestions, and I fear damaging my income by doing it wrong.

[–] dual_sport_dork@lemmy.world 5 points 3 days ago

They should, yes, but they don't. In fact, they'll ding you for having too many failed transactions and claim that it's your responsibility to do something about it.

[–] WaxRhetorical@lemmy.world 1 points 3 days ago (1 children)

You'd think the onus here should be on PayPal and Stripe.. Do they have anything to say?

[–] Steve@startrek.website 3 points 3 days ago

They dont give a flying fuck.