geekhack

geekhack Marketplace => Vendor Forums => Drop => Topic started by: xxxkaliboyxxx on Mon, 08 February 2016, 15:17:11

Title: Security Valuation
Post by: xxxkaliboyxxx on Mon, 08 February 2016, 15:17:11
I just got contacted by my credit card company about having fraudulent charges on my credit card at Walmart out of all places,  Location Brisbane, California. I am really pissed about this since this is the only website that I have used my credit card for. I would look internally and I will be pulling my business away since obviously there is some type of security valuation somewhere. Not necessary at MassDrop but chances are pretty high based on location and being the only place where I used my credit card.
Title: Re: Security Valuation
Post by: Melvang on Mon, 08 February 2016, 15:25:54
Credit cards are actually safer to use online than retail stores with the current SSL stuff these days from what I have seen. 

Did you check your transaction history online or paper copy for verification? 
Title: Re: Security Valuation
Post by: xxxkaliboyxxx on Mon, 08 February 2016, 15:39:03
Yup, that was my only saving grace using the credit card, I usually just use Paypal. I guess either would of been OK but my credit card company stopped it before it was even authorized.

Checking online was the first thing we did after I received my credit card warning. Only thing out of our ordinary was literally just MassDrop. Not saying it is them, maybe I am just pissed but when I inquire even more, the location was Brisbane, California (right outside of SF). The location is what bugs me. BTW i'm on the other coast.
Title: Re: Security Valuation
Post by: romevi on Mon, 08 February 2016, 15:47:41
Yup, that was my only saving grace using the credit card, I usually just use Paypal. I guess either would of been OK but my credit card company stopped it before it was even authorized.

Checking online was the first thing we did after I received my credit card warning. Only thing out of our ordinary was literally just MassDrop. Not saying it is them, maybe I am just pissed but when I inquire even more, the location was Brisbane, California (right outside of SF). The location is what bugs me. BTW i'm on the other coast.

That's odd. If it indeed was Massdrop, they may have gotten hacked. In which case, you should notify them immediately.
Title: Re: Security Valuation
Post by: xxxkaliboyxxx on Mon, 08 February 2016, 15:51:43
I notified them through the support ticket channels. There are other possibilities but why Brisbane? We may never know, at the very least I hope to urge MassDrop to do an interal inquiry. It sucks, I really wanted the Pulse set =(
Title: Re: Security Valuation
Post by: Steezus on Mon, 08 February 2016, 15:53:32
I honestly don't see the location as anything to do with Massdrop. Most of the time when somebody steals your card they'll sell the info to another person who in turn puts the charges on your card.
Title: Re: Security Valuation
Post by: xxxkaliboyxxx on Mon, 08 February 2016, 16:00:23
I honestly don't see the location as anything to do with Massdrop. Most of the time when somebody steals your card they'll sell the info to another person who in turn puts the charges on your card.

Very true if it wasn't for the fact that this credit card is my emergency backup fund. Which mean it has never been used online. It has been used physically years ago to buy a plane ticket. Could it be from there? Sure, more likely not. Like I said I usually use Paypal or my debit which both are tied to each other. No other place has my credit card info.

Edit: Just in case anyone wonders why I used my creditcard at Mass Drop, well I was not sure when they actually charge the buyer and I'm a budgeting nerd
Title: Re: Security Valuation
Post by: MassdropAlex on Mon, 08 February 2016, 16:36:31
Hmmm we don't actually store any credit card info on our site, database, or otherwise so getting your info stolen by using Massdrop would be surprising. We use a company called Braintree which is a spin off of Paypal and they handle all credit information. If they were compromised I feel like it would be a major deal.

On a quasi related note, Alibaba/Taobao had about 21 million accounts compromised so I recommend changing your info over there if anyone has an account. Just a heads up since I know a lot of us use that site once in awhile.


edit: Also, thanks for the heads up and I flagged it to engineering just in case
Title: Re: Security Valuation
Post by: livingspeedbump on Thu, 18 February 2016, 18:18:57
I just got contacted by my credit card company about having fraudulent charges on my credit card at Walmart out of all places,  Location Brisbane, California. I am really pissed about this since this is the only website that I have used my credit card for. I would look internally and I will be pulling my business away since obviously there is some type of security valuation somewhere. Not necessary at MassDrop but chances are pretty high based on location and being the only place where I used my credit card.

Yeah, Target was hit a bit back, tons of people in our area had to get new cards. Almost certainly a local place where you actually swiped your card.
Title: Re: Security Valuation
Post by: popkorn62 on Thu, 10 March 2016, 00:43:51
I doubt the location has anything to do with the fraudulent charge. I actually got an unauthorized charge once on my card at a store in Arizona. As a matter of fact, I've never been to Arizona.
Title: Re: Security Valuation
Post by: smknjoe on Thu, 10 March 2016, 01:07:10
Like others have said...it's much more likely to be compromised at a brick and mortar store than online since it's so much easier.

I've had one account compromised 3 times and the card had not been used online 2 of the 3 times. It was either from swiping at a vulnerable terminal/store, or my bank had been hacked. Which happens more often than you think. They just eat the costs rather than going public and hurting their reputation.
Title: Re: Security Valuation
Post by: swimmingbird on Sun, 20 March 2016, 07:42:29
I don't think it would be Massdrop - your card probably went through a skimmer at a physical location

Where it shows up doesn't really say much about anything either as the carders tend to sell the stuff they have rather than use it themselves
Title: Re: Security Valuation
Post by: azhdar on Sun, 20 March 2016, 07:52:45
I'm not sure what it is with MassDrop but I got transaction declined the last time I tried to pay something credit card on MD, got a message from the bank telling to call ASAP.

I ordered a lot online and it's the only time the bank block a transaction because they wanted to assure I made that transaction.
Title: Re: Security Valuation
Post by: MassdropYanbo on Sun, 20 March 2016, 15:59:53
I'm not sure what it is with MassDrop but I got transaction declined the last time I tried to pay something credit card on MD, got a message from the bank telling to call ASAP.

I ordered a lot online and it's the only time the bank block a transaction because they wanted to assure I made that transaction.

Did you change the value of your order? That can trigger it.