Hacker News Reader

Comment by ehhthing | Hacker News Reader

I think the issue has been rather overblown. Realistically I think the solution to this problem is to make riders more aware of the existence of this website, so if they feel that they may be tracked by an abusive partner they'll know how it's happening.

It is not a security issue in itself.

View on HN

Are you cool with sharing your Amazon purchase history with random strangers who have your credit card number?

I'm confused, these are completely different situations. But also, yes?

If a random stranger has my credit card info, I feel like I have much bigger problems than people knowing my Amazon purchase history.

Every time you hand your card to someone they could grab the info. If they use it to buy something, that's fraud and they'll hopefully get in lots of trouble. But if they just use it to track you to your home neighborhood or place of work, is that illegal?

Sorry I'm not American, I don't just hand my card to random strangers. Kinda forgot that was a thing at restaurants there.

My perspective comes purely from a person that exclusively uses Google Pay and occasionally Chip + PIN when my purchases go over the limit for that.

Yeah, no one really cares here because we're not responsible for someone else stealing the money. We just call the bank and they give it all back. The worst part is waiting for a new card to ship and then updating all your payment information with the new card number wherever you're using auto payment.

I don't even bother updating the number on recurring stuff. Most recurrent payments keep going through just fine even if the number itself was compromised.

If you are using it to represent someone else's identity, yes, that's fraud. Doing it on a computer outside the intended purpose will add on a hacking charge. Together, at maximum, that can get you 5 years in prison and a ban from using a computer or smartphone for a decade. Those are federal maximums, per count, but states might have harsher penalties. Source: An FBI agent at an infosec conference.

"Can".

I'm not quite convinced the FBI has "accessing a normal poor person's data without a password" at the top of their list of crimes to investigate.

Nah, the source is for the maximums for fraud and hacking. Should have clarified.

.. unless you piss off the government. Then they'll get you good!

Reply on news.ycombinator.com