Hacker News

points by Crunchified 1 day ago | 0 comments

This advice from the article to the affected retailers:

Brands and their ordering providers that watch for their site loading under someone else's domain, or for checkout sessions that never reach the real payment provider, are well placed to catch these sites early.

It can be detected if the IT folks look in the right places. I suppose a SCAM ALERT page could be presented to a reverse proxy when discovered.

[–] StilesCrisis 1 day ago

I don't see what you could do about "people browse the site but don't check out." I'm sure that is normal for any website regardless.

[–] ano-ther 1 day ago

In this case, wouldn’t you see a lot of abandoned carts coming from the reverse proxy sessions?

[–] StilesCrisis 1 day ago

I don't know the scale of cart-abandonment for a website like Jimmy John's, but it has got to be large enough that a few dozen more wouldn't be _too_ surprising.

[–] chezzwizz 16 hours ago

> it has got to be large enough that a few dozen more wouldn't be _too_ surprising.

Shouldn't it be though? What is the precedent here? Isn't anyone concerned about the slow boiling frog any more?

[–] pixl97 16 hours ago

Doing a quick search on it, and if the AI response is anywhere close to true, the vast majority of times a cart is filled it's not checked out. Food has one of the lowest rates, but that's still 30-50% abandonment.

Honestly it's something that happens with my family quite often. I'll start putting stuff in a cart then someone else changes their mind and we switch to another place to order. And it feels like this happens all the time.