Seems like BitPay have forgotten one teensy little aspect of crypto.

pooya87

legendary

Activity: 3472

Merit: 10611

i say they should add an additional option at the bottom of each invoice for anyone who can not use BIP70 or doesn't have a compatible wallet, to click it and get the payment information. they can put a big red warning saying this is not secure or whatever....

Quote from: exstasie on February 23, 2018, 06:26:37 PM

Quote from: leowonderful on February 23, 2018, 04:24:18 PM

They supposedly enforced BIP70 for security and less man-in-the-middle attacks (but by using BIP70 they're able to 'reject' BTC transactions).

How does it prevent MITM attacks? How can they reject transactions?

it protects against MITM attacks by adding a TLS-protection to the process of communicating with their servers for receiving the address and payment information.
they can NOT reject transactions because the merchant is not the network, you send the transaction to the network like you send it if you used any other way of getting the payment information like using BIP21. unfortunately that misinformation about "rejecting" was spread thanks to reddit!

this picture should help you visualize the process:

timerland

hero member

Activity: 1526

Merit: 596

Quote from: Remember remember the 5th of November on February 23, 2018, 12:16:18 PM

Instant Transactions. Not instant confirmation(depending on the coin), but instant transactions, so color me surprised when I had failed to fully pay an invoice and I requested a refund.

Quote

While we typically process refunds within 24 hours of submitting the refund request, please allow 1-2 business days for processing. We will notify you when the refund is complete.

I also never knew that coins utilizing mining and a public blockchain only work on business days.

Furthermore, they have botched the payment method by requiring Bitcoin Payment Protocol, they hide the payment address and require apps to pay, on mobile with no dedicated wallet I use other online services..and I couldn't do it, it was thanks to a kind soul on reddit that I saw the method to find the payment address.

They should at least give people an alternative to using the bitcoin payment protocol. Not everyone is familiar with it and not everyone thinks it's any particularly useful. And not every wallet and especially exchange supports this protocol yet. Personally, I think that if you pay the due care when sending bitcoin payments to a normal address, you'll never get the address and amount wrong anyways. It's all copy and pasting. There are some merits to it, but is it really worth it for the hassle of transferring your bitcoin to an entirely new wallet if yours isn't supported?

The refunds should also be given to the user, as soon as there is a sufficient amount of confirmations on the deposit that the user sends to Bitpay for the invoice. It shouldn't take 1-2 business days to refund a simple bitcoin transaction that has nothing special about it.

Bitpay's monopoly on bitcoin fiat payment processing is fading away anyhow, with new competitors popping up left and right, both locally and globally.

jtipt

hero member

Activity: 1050

Merit: 529

Quote from: leowonderful on February 23, 2018, 04:24:18 PM

Quote from: Remember remember the 5th of November on February 23, 2018, 12:16:18 PM

Instant Transactions. Not instant confirmation(depending on the coin), but instant transactions, so color me surprised when I had failed to fully pay an invoice and I requested a refund.

Quote

While we typically process refunds within 24 hours of submitting the refund request, please allow 1-2 business days for processing. We will notify you when the refund is complete.

I also never knew that coins utilizing mining and a public blockchain only work on business days.

Furthermore, they have botched the payment method by requiring Bitcoin Payment Protocol, they hide the payment address and require apps to pay, on mobile with no dedicated wallet I use other online services..and I couldn't do it, it was thanks to a kind soul on reddit that I saw the method to find the payment address.

They supposedly enforced BIP70 for security and less man-in-the-middle attacks (but by using BIP70 they're able to 'reject' BTC transactions). I appreciate their attempt at more security, but like you said many wallets still don't even support BIP70.

It's very annoying that they enforced BIP70. The only way I could pay it is using mycelium, and well there's a whole other story about mycelium. The major problem is bitpay is still the biggest payment processor for bitcoin, and most of the merchants don't care about bitcoin at all as long as they are getting the money in $. So its unlikely we'll see they switch to some other payment processor.

magneto

hero member

Activity: 1666

Merit: 753

Quote from: Remember remember the 5th of November on February 23, 2018, 12:16:18 PM

Instant Transactions. Not instant confirmation(depending on the coin), but instant transactions, so color me surprised when I had failed to fully pay an invoice and I requested a refund.

Quote

While we typically process refunds within 24 hours of submitting the refund request, please allow 1-2 business days for processing. We will notify you when the refund is complete.

I also never knew that coins utilizing mining and a public blockchain only work on business days.

Furthermore, they have botched the payment method by requiring Bitcoin Payment Protocol, they hide the payment address and require apps to pay, on mobile with no dedicated wallet I use other online services..and I couldn't do it, it was thanks to a kind soul on reddit that I saw the method to find the payment address.

I have no idea why they have to manually refund transactions. If the transactions are confirmed, then it should be able to be automatically and instantly refunded to the payer if there is an error. Just like shapeshift.

If they require you to wait for up to 2 business days, then that's just complete and utter BS.

Also when I paid for something via Bitpay I also realized that they now require you to pay to payment tags, instead of just bitcoin addresses. They have to understand that not all wallets have support for this feature. I'd say probably at least half doesn't.

exstasie

legendary

Activity: 1806

Merit: 1521

Quote from: Remember remember the 5th of November on February 23, 2018, 12:16:18 PM

Furthermore, they have botched the payment method by requiring Bitcoin Payment Protocol, they hide the payment address and require apps to pay, on mobile with no dedicated wallet I use other online services..and I couldn't do it, it was thanks to a kind soul on reddit that I saw the method to find the payment address.

I was annoyed at first, but it's pretty convenient if you are using a BIP70-compliant wallet. I think BitPay got overwhelmed by people who copy/pasted addresses and amounts incorrectly and then bogged down their customer service. First, they added a big warning prompt if you attempted to copy/paste instead of using a QR code. Then they implemented BIP70.

Quote from: leowonderful on February 23, 2018, 04:24:18 PM

They supposedly enforced BIP70 for security and less man-in-the-middle attacks (but by using BIP70 they're able to 'reject' BTC transactions).

How does it prevent MITM attacks? How can they reject transactions?

BitHodler

legendary

Activity: 1526

Merit: 1179

BitPay received a shitload of criticism regarding their retarded change, and rightfully so. In their terms it's done for security purposes, but in real world terms, it will make people move away from BitPay.

Also, this costs merchants using BitPay to accept Bitcoin potential revenue, which is a shame. For that reason I strongly believe that BitPay will return the option to view and copy the standard address.

It's mind boggling how they went ahead and globally deployed their new payment forms, without testing everything on a much smaller scale. I am sure that it would have made them aware of how annoying it is.

Just shows how businesses when growing larger, care less about their users......

leowonderful

legendary

Activity: 1624

Merit: 1130

Bitcoin FTW!

Quote from: Remember remember the 5th of November on February 23, 2018, 12:16:18 PM

Instant Transactions. Not instant confirmation(depending on the coin), but instant transactions, so color me surprised when I had failed to fully pay an invoice and I requested a refund.

Quote

While we typically process refunds within 24 hours of submitting the refund request, please allow 1-2 business days for processing. We will notify you when the refund is complete.

I also never knew that coins utilizing mining and a public blockchain only work on business days.

Furthermore, they have botched the payment method by requiring Bitcoin Payment Protocol, they hide the payment address and require apps to pay, on mobile with no dedicated wallet I use other online services..and I couldn't do it, it was thanks to a kind soul on reddit that I saw the method to find the payment address.

They supposedly enforced BIP70 for security and less man-in-the-middle attacks (but by using BIP70 they're able to 'reject' BTC transactions). I appreciate their attempt at more security, but like you said many wallets still don't even support BIP70. If you know any businesses using Bitpay right now, I strongly suggest you urge them to use Coinpayments, CoinGate or CoinsBank- they're perfectly good alternatives and unlike Bitpay they're not trying to sabotage BTC. The faster people change over to these alternatives, the better.

Remember remember the 5th of November

legendary

Activity: 1862

Merit: 1011

Reverse engineer from time to time

Instant Transactions. Not instant confirmation(depending on the coin), but instant transactions, so color me surprised when I had failed to fully pay an invoice and I requested a refund.

Quote

While we typically process refunds within 24 hours of submitting the refund request, please allow 1-2 business days for processing. We will notify you when the refund is complete.

I also never knew that coins utilizing mining and a public blockchain only work on business days.

Furthermore, they have botched the payment method by requiring Bitcoin Payment Protocol, they hide the payment address and require apps to pay, on mobile with no dedicated wallet I use other online services..and I couldn't do it, it was thanks to a kind soul on reddit that I saw the method to find the payment address.

Topic: Seems like BitPay have forgotten one teensy little aspect of crypto. (Read 122 times)