3 ms·
Your feigned "maybe you can help me?" reads more like sealioning than like a genuine lack of understanding. However, sure, I'll humour you. A "signed and expir
by TheDong 7y ago
Your feigned "maybe you can help me?" reads more like sealioning than like a genuine lack of understanding.
However, sure, I'll humour you. A "signed and expiring token" is not sufficient because then a single attacker could use that token to try 1000s of cards before it expires.
Thus, you need a unique token, and wherever you store that unique token (to invalidate it, akin to a database session), you can optionally store the mouse movements or not. The association still exists. A unique token isn't functionally different from just sending the data along in the first place.
- snowwrestler 7y agoI think he/she is being very patient with people who don't seem to have a good understanding of the law they're citing.
- lucb1e 7y agoReally, you read that as being patient? To me it seems to be an obvious attempt to rub the person they're replying to entirely the wrong way while feigning ignorance. I would flag it as attempting to trigger others if each reply did not also contain one or two constructive sentences. > with people who don't seem to have a good understanding of the law "People" had a fine understanding of applicable PII law, but the person clarified (in between a bunch of bullshit about how godforsaken sorry they are) that they were talking about some USA thing specifically and not the broader definition.
- hanselot 7y agoI think he/she and an army of stripe lawyers are on this board right now.