It’s so big. Couldn’t they have come up with a more subtle form factor?
79 karma · joined May 29, 2013
Everyone is blaming VCs. They should be blaming themselves.
You have two choices: 1) go to IRC, where they only answer technical integration questions, or 2) firing an email into the black hole that is support@stripe.com, and crossing your fingers that someone will respond within 2-5 days.
We've been burned several times by how slow they are to fix payment problems. You send an email to support@stripe.com, and then the waiting begins.
For a service that is critical to the day-to-day functioning of a small business, their support process is unacceptable. When a critical payment issue arises, there is no phone number to call and no ticket escalation process to let you know that your issue is being worked on. We finally moved off Stripe because their support process added too much risk to our business.
I know Stripe gets a lot of love from this community. But these SV businesses need to learn that customer experience goes deeper than having a flashy UI and easy-to-read integration docs.
* Allows you to get a mortgage
* Allows you to protect yourself with health/car/life/home/title/etc insurance
* Pays for your highways/stadiums/schools and other public works
* Protects your deposits
* Pays for your retirement
* Funds the college fund that paid for your school
* ... Or the student loans that allowed you to attend school
* Supports the global supply chain that brings you your iPhone, stocks the grocery store/your favorite restaurants with food, and puts the clothes on your back.
* Funds the growth of corporations large and small, giving you the job that allows you to buy an iPhone
* Funds the massive philanthropy expenditures that help those in need everyday
* Pays the pensions of the elderly
Financial innovation make our lives more predictable and less sensitive to chance. One could argue a huge amount of human progress is owed to modern-day financial institutions.
Like a software system, it's extremely naive to think that complexity is a sign that a system is rotten. Finance is an art, not a science. Sometimes we make products that we don't always completely understand until later. But the vast majority of financial innovations are deeply ingrained in the good life that you get to enjoy every day.
1) An individual says something mildly offensive 2) People incite mob anger via Twitter 3) Person gets fired. 4) Twitter applauds itself.
How many more times are we going to see this?
Maybe it's sick for these people to hold these views.
It's also sick to try and get people _fired_ when you 1) don't even know them and 2) probably didn't even hear their offensive remark in person.
No one can ever claim they've never said something inoffensive.
I'm going to delete my Twitter account. We're living in an era of mob rule.
More importantly, it's trivial for an adversary who cares.
If I'm encrypting a note containing state secrets to send to a foreign intelligence officer, the NSA has the technology (and more importantly, the resources) to brute force their way in.
And if your password is too complex to crack (read: a 256-bit key), you probably can't remember it either, which means you have to write it down somewhere; so an adversary who cares would find an outside channel (subpoena, hack your personal computer) to determine your key.
What is your key derivation algorithm? PBKDF2?
From an academic viewpoint, it's not really strong encryption if your AES key is derived from a password. Your key space is limited to ASCII characters, and 99% of users will not choose a strong password. So from my perspective, if you sent me a DB dump, I could read almost everything.
If that's the case, then my attack would be:
* Loop through a list of common passwords.
* Derive keys from those passwords.
* See if any decrypted results return an ASCII-like result.