3 ms·
If you visit this link, they can pay you $5,000: https://magic.bettir.com/?p=-500000 https://magic.bettir.com/?p=-500000
by jboggan 12y ago
If you visit this link, they can pay you $5,000: https://magic.bettir.com/?p=-500000 https://magic.bettir.com/?p=-500000
- octatoan 12y agoWait, what?
- codygman 12y agoWhoa, seriously? I'm going to guess you're joking since they probably implemented "customer order of amount x".
- jboggan 12y agoEdit: they've fixed this now. I'm not joking, click on it and try to pay. It shows an invoice of ($5,000), a.k.a. $5000 negative dollars. I didn't enter real payment information to see what happens next because of really idiotic interpretations of what constitutes "hacking", but it is a really bad design choice on their part that took me about half a second to find. Founder, if you're reading this: was this an in-house build or did you outsource this?
- edmack 12y agoThe answer is probably they spent around two days building this before demand grew left them zero time to improve infrastructure. Which is more or less good.
- jboggan 12y agoLess good? Infrastructure breaking because of load is one thing (concurrency/DB issues) but nothing like this should ever be exposed to the user on general principle.
- lalm 12y agohttps://i.imgur.com/yJDY3m2.png https://i.imgur.com/yJDY3m2.png
- ryanlol 12y agoStripe doesn't let you send money to cards.
- jboggan 12y agoI'm glad to know Stripe's API is sane but you cannot ever rely on that when designing something like this!