Author

Topic: Seems like BitPay have forgotten one teensy little aspect of crypto. (Read 122 times)

legendary
Activity: 3472
Merit: 10611
i say they should add an additional option at the bottom of each invoice for anyone who can not use BIP70 or doesn't have a compatible wallet, to click it and get the payment information. they can put a big red warning saying this is not secure or whatever....

They supposedly enforced BIP70 for security and less man-in-the-middle attacks (but by using BIP70 they're able to 'reject' BTC transactions).

How does it prevent MITM attacks? How can they reject transactions?

it protects against MITM attacks by adding a TLS-protection to the process of communicating with their servers for receiving the address and payment information.
they can NOT reject transactions because the merchant is not the network, you send the transaction to the network like you send it if you used any other way of getting the payment information like using BIP21. unfortunately that misinformation about "rejecting" was spread thanks to reddit!

this picture should help you visualize the process:

hero member
Activity: 1526
Merit: 596
Instant Transactions. Not instant confirmation(depending on the coin), but instant transactions, so color me surprised when I had failed to fully pay an invoice and I requested a refund.

Quote
While we typically process refunds within 24 hours of submitting the refund request, please allow 1-2 business days for processing. We will notify you when the refund is complete.

I also never knew that coins utilizing mining and a public blockchain only work on business days.

Furthermore, they have botched the payment method by requiring Bitcoin Payment Protocol, they hide the payment address and require apps to pay, on mobile with no dedicated wallet I use other online services..and I couldn't do it, it was thanks to a kind soul on reddit that I saw the method to find the payment address.

They should at least give people an alternative to using the bitcoin payment protocol. Not everyone is familiar with it and not everyone thinks it's any particularly useful. And not every wallet and especially exchange supports this protocol yet. Personally, I think that if you pay the due care when sending bitcoin payments to a normal address, you'll never get the address and amount wrong anyways. It's all copy and pasting. There are some merits to it, but is it really worth it for the hassle of transferring your bitcoin to an entirely new wallet if yours isn't supported?

The refunds should also be given to the user, as soon as there is a sufficient amount of confirmations on the deposit that the user sends to Bitpay for the invoice. It shouldn't take 1-2 business days to refund a simple bitcoin transaction that has nothing special about it.

Bitpay's monopoly on bitcoin fiat payment processing is fading away anyhow, with new competitors popping up left and right, both locally and globally.
hero member
Activity: 1050
Merit: 529
Instant Transactions. Not instant confirmation(depending on the coin), but instant transactions, so color me surprised when I had failed to fully pay an invoice and I requested a refund.

Quote
While we typically process refunds within 24 hours of submitting the refund request, please allow 1-2 business days for processing. We will notify you when the refund is complete.

I also never knew that coins utilizing mining and a public blockchain only work on business days.

Furthermore, they have botched the payment method by requiring Bitcoin Payment Protocol, they hide the payment address and require apps to pay, on mobile with no dedicated wallet I use other online services..and I couldn't do it, it was thanks to a kind soul on reddit that I saw the method to find the payment address.
They supposedly enforced BIP70 for security and less man-in-the-middle attacks (but by using BIP70 they're able to 'reject' BTC transactions). I appreciate their attempt at more security, but like you said many wallets still don't even support BIP70.
It's very annoying that they enforced BIP70. The only way I could pay it is using mycelium, and well there's a whole other story about mycelium. The major problem is bitpay is still the biggest payment processor for bitcoin, and most of the merchants don't care about bitcoin at all as long as they are getting the money in $. So its unlikely we'll see they switch to some other payment processor.
hero member
Activity: 1666
Merit: 753
Instant Transactions. Not instant confirmation(depending on the coin), but instant transactions, so color me surprised when I had failed to fully pay an invoice and I requested a refund.

Quote
While we typically process refunds within 24 hours of submitting the refund request, please allow 1-2 business days for processing. We will notify you when the refund is complete.

I also never knew that coins utilizing mining and a public blockchain only work on business days.

Furthermore, they have botched the payment method by requiring Bitcoin Payment Protocol, they hide the payment address and require apps to pay, on mobile with no dedicated wallet I use other online services..and I couldn't do it, it was thanks to a kind soul on reddit that I saw the method to find the payment address.

I have no idea why they have to manually refund transactions. If the transactions are confirmed, then it should be able to be automatically and instantly refunded to the payer if there is an error. Just like shapeshift.

If they require you to wait for up to 2 business days, then that's just complete and utter BS.

Also when I paid for something via Bitpay I also realized that they now require you to pay to payment tags, instead of just bitcoin addresses. They have to understand that not all wallets have support for this feature. I'd say probably at least half doesn't.
legendary
Activity: 1806
Merit: 1521
Furthermore, they have botched the payment method by requiring Bitcoin Payment Protocol, they hide the payment address and require apps to pay, on mobile with no dedicated wallet I use other online services..and I couldn't do it, it was thanks to a kind soul on reddit that I saw the method to find the payment address.

I was annoyed at first, but it's pretty convenient if you are using a BIP70-compliant wallet. I think BitPay got overwhelmed by people who copy/pasted addresses and amounts incorrectly and then bogged down their customer service. First, they added a big warning prompt if you attempted to copy/paste instead of using a QR code. Then they implemented BIP70.

They supposedly enforced BIP70 for security and less man-in-the-middle attacks (but by using BIP70 they're able to 'reject' BTC transactions).

How does it prevent MITM attacks? How can they reject transactions?
legendary
Activity: 1526
Merit: 1179
BitPay received a shitload of criticism regarding their retarded change, and rightfully so. In their terms it's done for security purposes, but in real world terms, it will make people move away from BitPay.

Also, this costs merchants using BitPay to accept Bitcoin potential revenue, which is a shame. For that reason I strongly believe that BitPay will return the option to view and copy the standard address.

It's mind boggling how they went ahead and globally deployed their new payment forms, without testing everything on a much smaller scale. I am sure that it would have made them aware of how annoying it is.

Just shows how businesses when growing larger, care less about their users......
legendary
Activity: 1624
Merit: 1130
Bitcoin FTW!
Instant Transactions. Not instant confirmation(depending on the coin), but instant transactions, so color me surprised when I had failed to fully pay an invoice and I requested a refund.

Quote
While we typically process refunds within 24 hours of submitting the refund request, please allow 1-2 business days for processing. We will notify you when the refund is complete.

I also never knew that coins utilizing mining and a public blockchain only work on business days.

Furthermore, they have botched the payment method by requiring Bitcoin Payment Protocol, they hide the payment address and require apps to pay, on mobile with no dedicated wallet I use other online services..and I couldn't do it, it was thanks to a kind soul on reddit that I saw the method to find the payment address.
They supposedly enforced BIP70 for security and less man-in-the-middle attacks (but by using BIP70 they're able to 'reject' BTC transactions). I appreciate their attempt at more security, but like you said many wallets still don't even support BIP70. If you know any businesses using Bitpay right now, I strongly suggest you urge them to use Coinpayments, CoinGate or CoinsBank- they're perfectly good alternatives and unlike Bitpay they're not trying to sabotage BTC. The faster people change over to these alternatives, the better.
legendary
Activity: 1862
Merit: 1011
Reverse engineer from time to time
Instant Transactions. Not instant confirmation(depending on the coin), but instant transactions, so color me surprised when I had failed to fully pay an invoice and I requested a refund.

Quote
While we typically process refunds within 24 hours of submitting the refund request, please allow 1-2 business days for processing. We will notify you when the refund is complete.

I also never knew that coins utilizing mining and a public blockchain only work on business days.

Furthermore, they have botched the payment method by requiring Bitcoin Payment Protocol, they hide the payment address and require apps to pay, on mobile with no dedicated wallet I use other online services..and I couldn't do it, it was thanks to a kind soul on reddit that I saw the method to find the payment address.
Jump to: