Urgent.News

What's breaking now, across thousands of outlets.

Editions

Tech

You issued the refund. They kept the money.

You issued the refund. They kept the money. Originally published on feeguard.dev . Syndicated here with a canonical link back to the original. A customer asks for their money back. You refund the charge. Stripe returns the funds, the customer is satisfied, the support ticket closes. The connected account keeps the transfer. Nothing in that sequence is a bug. Stripe did exactly what it was asked…

A customer requests a refund for a charge, and the platform promptly issues the refund, crediting the customer's account. However, the funds are not immediately returned to the platform's balance. Instead, the refund process involves three separate movements: the initial charge, the application fee, and the transfer to the connected account.

When a refund is issued, these movements are reversed only if explicitly requested. By default, the platform keeps the application fee and the transfer, resulting in financial losses for the platform. This issue arises due to missing flags in the refund process, which defaults to false, leaving the platform fully responsible for the refunded amount.

The consequences of this error are subtle, as the API calls return a 200 status, and there are no error alerts or logs to flag the issue. To identify these losses, one must manually cross-reference refunds with transfers and application fees, ensuring that the reversal amounts align with the terms of service. This oversight can lead to significant financial losses, especially when dealing with partial refunds over an extended period.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

Security updates for Friday

Security updates have been issued by AlmaLinux (ansible-core and pcp), Debian (chromium, libgit2, python-httplib2, and sabnzbdplus), Fedora (dokuwiki, domoticz, dotnet10.0, dotnet8.0, dotnet9.0…

Your .env file is not the problem

Your .env file is not the problem Originally published on keydrift.dev . Syndicated here with a canonical link back to the original. There is a reassuring ritual in every new project.

Prevent Screenshot and Screen Recording in Flutter (Android + iOS)

So, in this article, I will be showing you how you can prevent screenshots and screen recording in your Flutter app on both Android and iOS. I ran into this the hard way.

  • Add fluttersecurescreen dependency to Flutter project
  • Enable FLAGSECURE on Android to block screenshots and recordings
  • Use hidden UITextField workaround on iOS for screenshot protection

More from Friday 21 August →