Hacker News new | ask | show | jobs
by whatshisface 335 days ago
One of the reasons that credit card companies have an incentive to keep this stuff off people's statements is that they sell your credit card histories on the data market, and would not want you to have a strong reason to want to stop them.
6 comments

That's an interesting effect but I really don't think that's a significant driver here. It really seems to me like they're just being threatened by activists, journalists, and activist investors.
> That's an interesting effect but I really don't think that's a significant driver here. It really seems to me like they're just being threatened by activists, journalists, and activist investors.

Right-wing groups like Exodus Cry and Morality in Media (the groups behind the shutdown of Xtube, and the all-but-shutdown of Pornhub[0], as well as the short-lived ban of pornography on OnlyFans) are definitely the driving force behind these bans, but fundamentally the card networks are ambivalent at best when it comes to anything that could be remotely considered pornographic.

[0] Pornhub still operates, but they removed all "non-verified" content, so it mostly serves as an marketing outlet for studios and OnlyFans creators, and all of the older content that was never verified was removed entirely.

Visa/Mastercard are, like you said, ambivalent at best when it comes to pornography in general but there's more nuance to it. Content widely accepted to be immoral and/or illegal such as non-consensual pornography (that is explicit content posted without the consent of those filmed) and child sexual abuse material is forbidden. This is what the pornhub thing was about, allegedly, and why verified content is still allowed. Furthermore, material considered a brand risk is also not allowed but payment processors a step down are the ones who make the guidelines on what that means in practice. Depending on the processor this can include "extreme pornography" that is not in any way illegal and is only distasteful to most. A good example is that many payment processors do not porn featuring blood which is a big problem for women who menstruate.
> Content widely accepted to be immoral and/or illegal such as non-consensual pornography (that is explicit content posted without the consent of those filmed) and child sexual abuse material is forbidden. This is what the pornhub thing was about, allegedly, and why verified content is still allowed.

"Allegedly" is a very operative word there. Pornhub was actually extremely aggressive about removing CSAM and nonconsensual content, to the point where Facebook was actually a far larger problem for those actually concerned with stopping CSAM[0], with three orders of magnitude more instances on Facebook than all Mindgeek websites (including Pornhub) combined.

However, groups like the ones I mentioned only targeted Pornhub, because they don't actually care about CSAM. Their goal is to eliminate pornography and all "immoral" content, where "immoral" is defined according to an explicitly religious, right-wing interpretation of the term. That's not a secret; that's how they advertise themselves, and that includes the group in question here, Collective Shout[1], although the latter is now trying to hide that tie via futher censorship[2].

Because going after Facebook doesn't fit into an agenda of banning pornography, you'll never hear them mention one word about CSAM or other horrendous abuse that happens on Facebook and is facilitated by the platform.

> Furthermore, material considered a brand risk is also not allowed but payment processors a step down are the ones who make the guidelines on what that means in practice.

That's not quite true. Processors can set their own restrictions, but so can Visa/Mastercard/etc, and they absolutely do police perceived brand risk, which includes not just pornography, but also completely nonsexual content as well.,

[0] https://www.thedailybeast.com/facebook-a-hotbed-of-child-sex...

[1] https://www.notebookcheck.net/After-payment-processors-promp...

[2] https://bsky.app/profile/acvalens.net/post/3lufjdqmhxs2v

You've explained it better than I have, thank you. The one nitpick I want to make is the last part, my understanding is that Visa/Mastercard police their perceived brand risk primarily through broad statements that are then interpreted by payment processors in detail. Visa aren't the ones saying "Women having sex on their period is an extreme sexual activity", they're just saying "no extreme sexual activity" and the payment processor has to figure out what that means leading to the former claim.
> my understanding is that Visa/Mastercard police their perceived brand risk primarily through broad statements that are then interpreted by payment processors in detail. Visa aren't the ones saying "Women having sex on their period is an extreme sexual activity", they're just saying "no extreme sexual activity" and the payment processor has to figure out what that means leading to the former claim.

You're not wrong but that's only part of the story. What you're describing happens, which leads to overly-conservative interpretations of the unwritten policies. But the card brands do also have explicit rules that they expect downstream players to adhere to.

Confusingly - and this is where your impression (which is common) likely comes from - the card brands themselves provide different rules to different downstream providers, so it's not like there's one single, consistent list of rules for Visa globally (for example). It's not law and they are not bound by precedent or even an expectation of consistency.

I just checked and my statement says 'Steam', not what specific game was purchased
@grok is this true?

just kidding. this is the first i've heard of that, though.

i don't think it totally makes sense. your card transaction will still say "STEAMGAMES.COM 7264823" or similar, regardless of the content purchased. on top of that, all sorts of shady porn & dating websites that you would NOT want leaked use the credit card companies.

Data enrichment brokers cross index purchase times with other data from legal factory installed spyware found in cash registers, analytics tools in proprietary software you already have on your computer, etc etc.

Every time you buy an over the counter medication at the pharmacy with a credit card, the data brokers know by combining information sources, and sell it to insurance companies.

But it still doesn't apply here. At most they could cross-reference it with a public Steam profile that has the game listed as owned after the purchase (actually, I doubt they would have the account ID to prove it for sure, but with enough purchases they could likely figure it out), but by then you've already sort of revealed to the world you bought whatever embarrassing title yourself.
No Steam API access or public data needed. Major game studios include analytics suites (bspyware) which also tend to collect information on what other software you have installed, can harvest data from Steam client side, etc etc.

That data is then sold back to the data brokers.

is there somewhere i can read more about this? this is very troubling information depending on the depth and scale of implementation.
https://www.gameanalytics.com/market-intelligence

Straight up spyware developers embed in games.

Several competitors exist too.

Hmm, unfortunately, the URL is broken. "Safari can't open the page because the address is invalid." Couldn't get it to show in the internet archive, either. _puts on tinfoil hat._
And this is really bad, like I forgot the number of times I give in to get that pack of candy near the register at a shop then after a couple days exactly as the pack is empty I get shown a commercial of the same brand of the same pack/size etc.
Where are you? In the United States, there are displays of candy at every cash register, but they're individual servings that you're expected to eat in full immediately after leaving the store. A big bag with several days' worth of candy would have to come from the candy aisle.

And... are you really being served internet ads for candy?

Nonsense. The title of the game you purchased on Steam does not end up on your statement.
Hey that's a pretty interesting thought actually. I hadn't considered that, but "follow the incentives and assume rationality" is generally (in my experience) the best way to try and understand why people do what they do. This theory definitely makes a lot of sense from that lens.