4 ms·
> Stripe updated their JavaScript library to give clients the ability to opt-out of deep data collection. They can now load the <script> tag with the advancedFr
by morpheuskafka 7y ago
> Stripe updated their JavaScript library to give clients the ability to opt-out of deep data collection. They can now load the <script> tag with the advancedFraudSignals=false parameter to disable this functionality:
If this is set on the client-side, what stops an attacker from editing the page to disable the fraud detection sites that want to use it?
- jedberg 7y agoSure, but that in and of itself would be a major fraud signal. If 99% of the traffic from a site is coming into their fraud system, and yours isn't, that would be an even bigger fraud signal that if it were on.