#Flight - Card Testing

1 messages · Page 1 of 1 (latest)

lusty sphinx
#

Hello! This isn't something we can help with much here, as it's typically account-specific. Have you reached out to Stripe Support for help?

fiery grotto
#

I have spent weeks talking to stripe support and I get very generic emails back. The twitter account has been helpful to some degree but I came to the discord to see if other developers could help

#

My website is currently charge disabled. Not just my from scratch stripe connect platform which is where the problems started but my squarespace ecommerce site is also shut down because they use the same processor.

fossil copper
#

Hi @fiery grotto I'm taking over this thread.

#

This discord server is staffed by engineers and we are unable to help with account specific problems. So I'd suggest you to follow up with Stripe support on this.

fiery grotto
#

Can I get some engineering ideas on how to protect an API secret key? My unique situation disregarded?

Or methods to prevent card testing from an engineering standpoint?

fossil copper
#

The general advise is to keep your API key secure in your server, and you shouldn't share it with anyone except yourself.

fiery grotto
#

Okay sounds good! Is stripe also aware of websites like janawaldner.com ?

I discovered it while reviewing card testing data from our website and it looks like there are entire websites dedicated to card testing against stripe secret keys

fossil copper
#

Thanks for letting me know! I'll tell the relevant team.

#

You should never expose your secret key to anyone.

fiery grotto
#

Thanks for the advice but for the record have never exposed our secret key to anyone and our server shows no signs of being compromised.

Thanks