3 ms·
There's also more than just phone. Could use the full credit card #. They can also send the device a push notification with a security token and have the user
by adrr 11y ago
There's also more than just phone. Could use the full credit card #. They can also send the device a push notification with a security token and have the user reset password with it in lieu of an email based token.
- icebraining 11y agoCould use the full credit card #. I doubt they're storing that.
- anulman 11y agoYou're likely right, but they could always get crafty with Braintree APIs: https://developers.braintreepayments.com/ios+ruby/reference/request/credit-card-verification/search https://developers.braintreepayments.com/ios+ruby/reference/...