___

  • money_loo@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    44
    ·
    1 year ago

    The fact people here don’t even understand how credit cards work is a pretty big sign my guy….

    • gravitas_deficiency
      link
      fedilink
      English
      arrow-up
      28
      arrow-down
      2
      ·
      1 year ago

      The fact that you think it’s reasonable for literally anyone but you to give out your credit card details is a pretty big sign my guy

      • brygphilomena@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        4
        ·
        edit-2
        1 year ago

        Because banks don’t give out credit card details.

        You created an authorization code which is independent from the credit card details. The authorization code doesn’t get revoked automatically when a card expires or a new card issued.

        • gravitas_deficiency
          link
          fedilink
          English
          arrow-up
          6
          ·
          1 year ago

          Jesus tap dancing christ. I understand the difference between CC + CCV + expiry date and an oauth token (or whatever protocol they’re using for identification and authentication). I’m saying that not expiring auth codes when new cards are issued is a security and privacy issue. Users should ideally be given a switch to opt in to behavior like that. It should not be the default.