Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>substitute coinbase's iframe with your own, when you use coinbase button

How would they go about fixing that? Verified by Visa is the same - you get redirected to some random domain "arcot.com"?. There's a verification code, but that's viewable by anyone that has your credit card (including the site operator where you just input your CC number).

Wouldn't Coinbase need to fully redirect to their own domain, or popup a window with the URL visible in order for users to know they're really dealing with Coinbase?



>Wouldn't Coinbase need to fully redirect to their own domain, or popup a window with the URL visible in order for users to know they're really dealing with Coinbase?

Yes, of course




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: