22
Stripe API Key: $70k Stolen from CCs via merchant to debit card "Instant Payments"
(webdesigneracademy.com)
c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.
THE RULES
Instance Rules
Community Rules
If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.
Learn about hacking
Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
Notable mention to [email protected]
Right, I was trying to be a little skeptical when I read her account (make sure she wasn't blaming them for some misunderstanding on her end), but I'm about 90% sure that I've done a few different times exactly what she did (export keys, put them in Woocommerce, done and assume it's fine.)
Basically, yes, I'm in full agreement with you that understanding in detail what to do (and, ideally, a strong message that people should be careful about doing it in the safe way) would definitely be good.
Yeah, once they document how to use it, I hope they also publish an PSA telling all users to disable their existing keys and migrate to using Restricted API Keys