3 ms·
My thoughts exactly as I was reading. Analytics gathering that’s not related to UI improvements wouldn’t bother to collect information on pointer movements. Bu
by skoskie 7y ago
My thoughts exactly as I was reading. Analytics gathering that’s not related to UI improvements wouldn’t bother to collect information on pointer movements.
But it turns out to be a pretty good tool for bot detection. That’s why you can now just check a box to verify you’re human (Something about that sentence feels quite dystopian).
I just don’t see the issue with Stripe’s practice here. They have a clear business model, and selling user data could severely undermine that model.
- amenod 7y agoSure, but business models change. The main issue here is that this behavior is enabled by default and hidden. If API would be used like this, I would see no problem: ``` import { ensureUsersAreTrackedForFraudPrevention, loadStripe, } from '@stripe/stripe-js'; ensureUsersAreTrackedForFraudPrevention() ``` Of course, they will never do that, because then many developers would opt-out, and they need the masses to make fraud prevention work.
- djur 6y agoIf the API was used like that it could be disabled trivially by someone committing fraud.
- hjnilsson 6y agoLikely many developers would opt-in when business sees the 5% surcharge for extra fraud. And regardless, stripe explicitly says in their documentation that you should include stripe.js on every page of your app, so they can do tracking of pointers movements for fraud detection. This has not been hidden in any way from devs.
- buildbot 7y agoUntil someone trains a reinforcement algorithm to click the box like a human ;)