boucher

52 ms·

1. 241.▲
   by boucher 15y ago

   Stripe doesn't communicate directly with your users, so there is no standard look from a customer's perspective. We're providing the tools to build your own payment forms hosted on your own website. Perhaps in the future we'll look into hel
2. 242.▲
   by boucher 15y ago

   Though to be fair, if you've got an XSS vulnerability, you can also just change the URL of the off site payment page to a phishing site, which most people will probably fall for.
3. 243.▲
   by boucher 15y ago

   Though it's hard to tell if this is just part of the sarcasm, or a legitimate concern, let me clear it up: you can sell things anywhere in the world with Stripe, you simply need to sell them from a US business entity.
4. 244.▲
   by boucher 15y ago

   Stripe doesn't appear at all. You have full control over what appears on the statement.
5. 245.▲
   by boucher 15y ago

   Rumored cost of this video is over 1 million dollars.
6. 246.▲
   by boucher 15y ago

   Yup, we do. Checkout my other answers in these comments.
7. 247.▲
   by boucher 15y ago

   Stripe does not currently have a logo, other than the word Stripe.
8. 248.▲
   by boucher 15y ago

   We do give you basic information, like whether or not the CVC code and billing address match the credit card. We'll consider adding more information over time.
9. 249.▲
   by boucher 15y ago

   We're working hard on preventing fraud.
10. 250.▲
    by boucher 15y ago

    We may at some point in the future, but it's unlikely to be one of our short term priorities. Stripe.js does make things easier for you, but you'll still need SSL.
11. 251.▲
    by boucher 15y ago

    No third party could completely protect you from an untrustworthy employee, but that doesn't automatically subject you to every theoretical PCI requirement. If you have a malicious employee, you'll be liable for the damage that employee cau
12. 252.▲
    by boucher 15y ago

    I think it's fixed in iOS 5, but yeah not an ideal answer.
13. 253.▲
    by boucher 15y ago

    Unfortunately, there are just a lot of regulations when dealing with payments across international borders.
14. 254.▲
    by boucher 15y ago

    I think the difference is customer service, not fraud per se. Customer service will always be our highest priority -- and that means when we do end up in situations where fraud is a concern, we'll work with our users to resolve things quick
15. 255.▲
    by boucher 15y ago

    Just shoot an email to support@stripe.com
16. 256.▲
    by boucher 15y ago

    There's no simple thing I can say here. There are situations where withholding funds might be required, but they should be exceedingly rare. In other words, we're hoping to eliminate false positives. In general, we're a tech company and we'
17. 257.▲
    by boucher 15y ago

    You should email support@stripe.com for specific things like this.
18. 258.▲
    by boucher 15y ago

    If someone injects javascript into your page, nothing you do will matter -- you are compromised. This is why your site has to be served over SSL (to prevent MITM attacks), and why you should be careful about what third party content you emb
19. 259.▲
    by boucher 15y ago

    We don't offer support for emailing your users right now.
20. 260.▲
    by boucher 15y ago

    It's mostly just a custom thing I wrote. The CSS is mostly taken (with permission) from Jeremy Ashkenas' sites (see Backbone, CoffeeScript, etc.)
21. 261.▲
    by boucher 15y ago

    There are no volume limits. What kind of verification are you talking about? Stripe does offer address verification: if you send the address with your requests, we'll return the AVS response from the credit card network, which tells if that
22. 262.▲
    by boucher 15y ago

    It's something people are asking for, so we'll be looking into it.
23. 263.▲
    by boucher 15y ago

    We don't support what's typically known as separate auth and capture in the payment industry (though we may in the future). Typically, we recommend just capturing the card information by attaching it to a customer object, and then making a
24. 264.▲
    by boucher 15y ago

    Probably best to send an email to support@stripe.com to figure out specific cases like this.
25. 265.▲
    by boucher 15y ago

    Yup, dealing with risk is a hard problem that we're giving a lot and thought and effort to. We rely a lot on online info to verify identity, which gives us some advantages. But yes, we're working hard on mitigating the risks involved with f
26. 266.▲
    by boucher 15y ago

    Thanks for the feedback. We'll work on clearer examples.
27. 267.▲
    by boucher 15y ago

    You can get the type and last 4 digits of the card. Right now, we only allow you to store one card for a customer -- something we'll probably change in the future. Since we aren't putting ourselves anywhere in the front end of your app, we
28. 268.▲
    by boucher 15y ago

    We totally get it. We're working on expanding to other countries right now, it's one of our top priorities.
29. 269.▲
    by boucher 15y ago

    We're certified as PCI Level 1 Compliant (the highest level). You can definitely build a market place on top of Stripe. We don't, at the moment, have an easy way for you to take money and then pay it out to other people, but if you're able
30. 270.▲
    by boucher 15y ago

    Germany is definitely on our list, thanks!