Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
Search - "mastercard"
-
I had a secondary Gmail account with a really nice short nickname (from the early invite/alpha days), forwarded to another of my mailboxes. It had a weak password, leaked as part of one of the many database leaks.
Eventually I noticed some dude in Brazil started using my Gmail, and he changed the password — but I still got a copy of everything he did through the forwarding rule. I caught him bragging to a friend on how he cracked hashes and stole and sold email accounts and user details in bulk.
He used my account as his main email account. Over the years I saw more and more personal details getting through. Eventually I received a mail with a plaintext password... which he also used for a PayPal account, coupled to a Mastercard.
I used a local website to send him a giant expensive bouquet of flowers with a box of chocolates, using his own PayPal and the default shipping address.
I included a card:
"Congratulations on acquiring my Gmail account, even if I'm 7 years late. Thanks for letting me be such an integral part of your life, for letting me know who you are, what you buy, how much you earn, who your family and friends are and where you live. I've surprised your mother with a cruise ticket as you mentioned on Facebook how sorry you were that you forgot her birthday and couldn't buy her a nice present. She seems like a lovely woman. I've also made a $1000 donation in your name to the EFF, to celebrate our distant friendship"31 -
I wonder why banks are always so terribly insecure, given how much money there's for grabs in there for hackers.
Just a while ago I got a new prepaid credit card from bpost, our local postal service that for some reason also does banking. The reason for that being that - thank you 'Murica! - a lot of websites out there don't accept anything but credit cards and PayPal. Because who in their right mind wouldn't use credit cards, right?! As it turns out, it's pretty much every European I've spoken to so far.
That aside, I got that card, all fine and dandy, it's part of the Mastercard network so at least I can get my purchases from those shitty American sites that don't accept anything else now. Looked into the manual of it because bpost's FAQ isn't very clear about what my login data for their online customer area now actually is. Not that their instruction manual was either.
I noticed in that manual that apparently the PIN code can't be changed (for "security reasons", totally not the alternative that probably they didn't want to implement it), and that requesting a forgotten PIN code can be done with as little as calling them up, and they'll then send the password - not a reset form, the password itself! IN THE FUCKING MAIL.
Because that's apparently how financial institutions manage their passwords. The fact that they know your password means that they're storing it in plain text, probably in a database with all the card numbers and CVC's next to it. Wouldn't that be a treasure trove for cybercriminals, I wonder? But YOU the customer can't change your password, because obviously YOU wouldn't be able to maintain a secure password, yet THEY are obviously the ones with all the security and should be the ones to take out of YOUR hands the responsibility to maintain YOUR OWN password.
Banking logic. I fucking love it.
As for their database.. I reckon that that's probably written in COBOL too. Because why wouldn't you.23 -
Bloomberg has revealed that Google has signed a secret deal with Mastercard that allows it to track what users buy offline19
-
Episode 2 of this rant: https://devrant.io/rants/851636/...
PM went to meet with the provider and came back, so I had a talk with the PM and it went like this:
Me: so how did the meeting go? Hope they corporate with you
PM: *in a sarcastic voice* Bro, you need be a good dev, they told me only a good dev can implement Master Card API calls, and its all in the docs. That's all they told me, so you should know how the meeting went
Me: *there is no wifi in jail, there is no wifi in jail, there is no wifi in jail, there is no wifi in jail* Fine bro, I'll go back to school and come back after 12 years.
Seriously when I send the provider the request and the body and all they tell me is: You have an error, Id must be unique but they fail to point out the exact error or at least send me a valid ID to test, how does this make me the bad dev and him the genius that can run Apple, Google, MS all together at once!
What is even worse, when I called the provider he told me: Man transaction ID must always be unique, how could you not know this, how is Mastercard supposed to differentiate between transactions!!
But hey, no one told me transaction id must be unique, primary keys are never unique, like DUH!10 -
Episode 3 of this rant: https://devrant.io/rants/871827/...
Me: So I'm going an API call to Mastercard but they don't give us back CreditCard token to save.
Provider: Ya man you need to curl a request in your code to get the token...blahblahblah.... man you need to know these things they are not an easy things to be done, just paste curl code on MasterCard website into your code and it will work
Me: *ignores his shit talk and proceed to test*
*5 minutes later*
MasterCard Server: error.cause=INVALID_REQUEST&error.explanation=Invalid+credentials.&result=ERROR
Me: *calls provider and tell him*
Provider: Oh sorry, we need to enable this feature for your account.
devRant people please, give me one reason why I should not leave this field, and maybe also leave this life knowing there are this type of people alive.
Thank you :)2 -
TL;DR: Why does that online shop NOT support paypal?
I'm a LITTLE pissed.
I wanted to buy some stuff online (since my gf birthday comes closer and I have no city, no car nearby to go shopping) - and this website doesn't support paypal. You know why? Because they had to high fees.
Why on earth don't they do it like any other online shop?! - the user can pay with paypal for a little more % or €.
I don't have an actual credit card but the thing you can get <18yo. Paypal works with it but I can't use any other payment option.13 -
Gj Mastercard! My card just got blocked because every time I want pay and 3D secure code is needed, every first SMS that day is delayed by 5 minutes so session expires and I have to try again...now it happened quite a few times and card got blocked. Fucking shit...2
-
Why do German companies hate paying interns decent wages?
I just had an interview for an internship at a decently funded startup, and they proposed MINIMUM WAGE as a salary. Acted like it was the most normal thing in the world, too.
I do have a Bachelor’s degree in Software Engineering and some actual working experience as a developer, yet they suggested they’d pay me even less than that if they were legally allowed to. Is that their way of saying they don’t want me after all? They did invite me to a second interview.
I get that interns generally aren’t as productive as senior devs who spend years on a certain project, but minimum wage? Fuck that!
Luckily, they’re just the first company I talked to, but I do feel a little offended.15 -
I think credit card comanies should pay me for using cards not vice versa.. or don't do shit like this when I am paying for it...
https://bloomberg.com/news/...2 -
Just spent the whole morning making a custom loading indicator for our app (an animated version of our logo). Animations are fun!3
-
!rant && isSorry = true
this aint StackOverFlow but I need a tiny help here, I'm receiving data result from an API that is formatted as x-www-form-urlencoded, do I add a valid url at the beginning and use URI parser in Android or is there some other solution for it?
Sample of the result I'm receiving:
repositoryId=TEST&response.gatewayCode=BASIC_VERIFICATION_SUCCESSFUL&result=SUCCESS&sourceOfFunds.provided.card.brand=MASTERCARD15 -
Is bunq netherlands only then or is it just full of NL fanboys? I find it pretty funny considering NL doesn't like foreign cards, debit or credit. Oh you want to pay for your stroopwaffels with a Visa card ? no... want to buy your la trappe with your mastercard? no. ING or Rabbobank only.... Netherlands needs to join the 21st century...11
-
Watched 2 different vendors struggle to get something going.
I stayed quiet during both meetings, the first, was a misconfiguration error on their project code. They were tailoring the product that they sold my institution, I could see the simple error: key-value settings on one of their json files (it is a dotneto app)
I don't get paid to troubleshoot the code for an external company, so I was silent, knowing full well this would take longer to get done, needless to say, I had originally advised against purchasing this product but was not listened to, very well then.
The other was a configuration issue on the side of a different Java based product, there were some strange XML configuration entries, some other project files that made little sense, but again: quiet.
Department head is concerned about the delays that this might cause and will still not ask if I am willing to help since he knows I A) was against this product purchase from the get go and B) knows DAMN well I will say that I don't get paid to troubleshoot the issues that third party vendors charging us over 100k of product "worth", they wanna spend the money on "enterprise" shit that does not work,they can deal with their own shit programs.
Morale of the story: money moves people. If there is no bling in my account: then I ain't doing it.
Now, I do get paid well for what I do, and for that I do bust my ass, for everything else: there is mastercard.11 -
bunq, N26 or revolut? I am also a bit sceptical because of brexit - i am sure it would affect revolut. I don't like the pricing of n26 but the metal MasterCard looks sexy and I love the features of bunq.
Not sure which bank I should choose...
Has anyone here got some more info about those three mobile first banks?9 -
"There are somethings money can't buy, for everything else there's MACard"
Random... Just popped into my head after I reread my own rant about tech acquisitions...
https://www.devrant.io/rants/5316331 -
!rant
This is fucking how you do it!
Ticketmaster UK had a "data security incident" where they don't really know if any data was actually leaked/stolen/"accessed by an unknown third-party" — their response:
1. Disable the compromised service across their platforms
2. Send a mail to any customer that may have been affected (I got one in Danish because I had only interacted with them through a Danish subsidiary)
2b. All notified customers have their passwords reset and must go through the "Forgot password" process; the _temporary_ password they sent me was even pretty nicely random looking: ";~e&+oVX1RQOA`BNe4"
3. Do forensics and security reviews to understand how the data was compromised
3b. Take contact to relevant authorities, credit card companies, and banks
4. Establish a dedicated website (https://security.ticketmaster.co.uk/...) to explain the incident and answer customer questions
5. "We are offering impacted customers a free 12 month identity monitoring service with a leading provider. To request this service please visit [this page]"
EDIT: As mentioned and sourced in the first comment, the breach was apparently noticed by a banking provider and reported to Ticketmaster on the 12th of April and later to Mastercard on the 19th of April.
Ticketmaster's internal investigation found no evidence of breach (which makes sense, as it wasn't an internal breach), but when Mastercard issued an alert to banks about it on the 21st of June, Ticketmaster followed up by finding the actual breach and disabling the breached third party service on the 23rd of June.
I still think they did the right thing in the right way...2 -
The credit card autocomplete function of Google chrome issues TWO bank statements each autocomplete. 1. -1$ 2. +1$ :/
-
there was a post about banning of Alex Jones and a pretty interesting discussion unravelled under it.
To those who participated, and are interested in the topic, I recommend watching this video with new information, kind of proving my point from that discussion and elaborating on it.
(For example, Mastercard is now revoking cards from people with... "incorrect opinions", it seems)
https://youtube.com/watch/...2 -
I need an advise for my capstone project. I'm planning to make an online booking system for a ferry company. Planning to make it for android and ios and maybe for web too. Did some research and found about ionic. Looks amazing but not sure if it's the right tech to use for my plan. Also about the payment gateway, I want the customers to pay on the app or the website directly without redirecting them to other website. Not really sure if I can use paypal with this, also i need the system to accept mastercard and visa.
I did the research, so please no hate, I'm not asking for the code. I just want to know the right tech to use. I'm just super confused and lost right now.8 -
Guys i need your help, i'm in my 3. semester where i have a REST project and therefore i need to implement some APIs and for this i shoud write a documentary where i discuss my decisions. And here is my problem
I need to implement a payment Api but i cant find a Big difference between the Visa and MasterCard Api, maybe some of you already worked with this api's and can help me out
What's better and why.1