Comment by ChuckMcM | Hacker News Reader

Comment by ChuckMcM | Hacker News Reader

Parent Full thread

From dale_glass' comment below: This way paidlink.to doesn't host anything, they don't even say what it is that they're going to direct the user to. This might be an attempt to keep payment processors off their back as long as possible.

This explanation strikes me as being closest. There is a well known problem, which is that using the non-crypto payment systems for things is difficult, by disintermediating the payment provider from the product the paidlink guys can say they have clean hands.

VISA: "What are you selling?"

PL: "Links"

VISA: "Links to what? Prohibited items?"

PL: "Oh no, our TOS doesn't allow that, we tell our customers not do do that."

VISA: "Can you verify that they don't?"

PL: "Uh, well as far as our platform is concerned their just links, you know like groceries are just groceries, we don't get into the nitty gritty of what exactly they are."

The weird thing is, even if the PL guys are 100% aligned with not letting their customers use this for "bad things" their customers are going to try to find ways around any systems they put in place to check or regulate.

Watching the shenanigans people pulled to get around our efforts to prevent the misuse of Blekko (a search engine) was really educational in that regard.

You might have noticed already, but your reply is quoting the same person you're replying to.

My first thought was that this was made for crypto locker payments.

The locker displays the qr code and polls for payment status

For clarity, you’re referring to ransomware.

Finally, I'll be able to do chargebacks on ransomware.

My thought was this could be a money laundering vehicle.

You're making it sound like this is more useful for money laundering than any desirable purpose.

Hmm, that wasn't what I was trying to communicate. The original question was "what problem is this solving?"

The ability to create a link that you click on, and it only gives you access to the results after you pay some money, has been implemented by many frameworks and commerce "stacks". Given that if you implement something that way with an off the shelf front end, you probably already have the capability to gateway the link with a payment ask. So that sets up the situation that we have a thing that just does one part of this kind of the thing, the pay when you click. Sort of "instant paywall for URIs" kind of thing. I think the question "Why would I use that?" or "What problem is this trying to solve?" implies that there is something about the well known solutions that prevents you from using them.

My guess was that you wouldn't use one of the existing solutions if you wanted to obfuscate the connection between the payment and the product. And it is just a guess, I have no investment in it being "the actual reason" or being right about my guess, just speculating here.

From your comment it suggests that you know of "desirable purposes" for just such a service. (which sounds like a problem solution right?) I would love to hear them. I am sure I'll learn something new and that will be awesome.

Maybe as a ticket entry system?

Bar with a cover charge puts a QR code on the front door. QR code leads you to a paid link, you pay for access, it shows a thumbs up, you show the bouncer, they let you in.

Let's the venue track how many people showed up, doesn't require a whole account situation, and also reduces the need for people to deal with card processing or cash at the door. Also let's you come and go without a wristband or stamp or something else to verify you already paid. Trivial to change the URL each day so you can't use a previous day. Or let it ride for weekend access, etc

Not sure if better solutions already exist though

> My guess was that you wouldn't use one of the existing solutions if you wanted to obfuscate the connection between the payment and the product. And it is just a guess, I have no investment in it being "the actual reason" or being right about my guess, just speculating here.

I think you're on to something here. Much like cryptocurrencies, I'm thinking that the most important uses here are at best questionably legitimate. Very few honest and above-board businesses have an interest in obfuscating what's being sold like this, but quite a few less legitimate ones do. Hit a URL to send money? Sounds great for money laundering, fraud, or extortion when you can move money around using convenient services and the veneer of legitimacy.

Reply on news.ycombinator.com