4 ms·

Well that seems like all the more reason for more individuals to run a Tor (relay) node instead of consolidating into a minimum number of easily blockable VPS s

Well that seems like all the more reason for more individuals to run a Tor (relay) node instead of consolidating into a minimum number of easily blockable VPS services. I personally am once again highly motivated after reading all the comments here basically excusing the shoddy behavior by lazy sysadmins. If my bank blocks me again, my solution will be to use a VPN instead of giving in.

salawat 6y ago
I'm just letting you know as someone who has been on the inside and actually talked with Risk departments at financial institutions. They do it with rooted phones, and they do it with Tor. If you're using those, you're an acceptable loss based on their metrics. Unless you can figure out a way to set up your friends and family to be Tor'd, and everyone else does too, that won't change. Also, no matter how much you point out that from the inside, you can't avoid the fact that a lot of fraud inevitably ends up using the same tools. I'm not saying I agree with or like that state of affairs, I've just fought that fight and it really doesn't go much of anywhere. They have their reasons, and what they deem to be acceptable reasons to make the decisions they do. As long as that is the case, you just end up having to live with it, or not do business with those companies. By fighting that fight, I mean doing things like pushing against things like adoption of device fingerprinting, and picking apart under what conditions it works and doesn't. From the perspective of the business these measures make sense. From the perspective of a society at large and what even a modest understanding of what courts would do with some meta-info if they knew it existed/was collected on the other hand, that resilience to fraud is not a luxury we may reasonably be able to afford for long.

4 ms·

Well that seems like all the more reason for more individuals to run a Tor (relay) node instead of consolidating into a minimum number of easily blockable VPS s

by glenneroo 6y ago

salawat 6y ago
I'm just letting you know as someone who has been on the inside and actually talked with Risk departments at financial institutions. They do it with rooted phones, and they do it with Tor. If you're using those, you're an acceptable loss based on their metrics. Unless you can figure out a way to set up your friends and family to be Tor'd, and everyone else does too, that won't change. Also, no matter how much you point out that from the inside, you can't avoid the fact that a lot of fraud inevitably ends up using the same tools. I'm not saying I agree with or like that state of affairs, I've just fought that fight and it really doesn't go much of anywhere. They have their reasons, and what they deem to be acceptable reasons to make the decisions they do. As long as that is the case, you just end up having to live with it, or not do business with those companies. By fighting that fight, I mean doing things like pushing against things like adoption of device fingerprinting, and picking apart under what conditions it works and doesn't. From the perspective of the business these measures make sense. From the perspective of a society at large and what even a modest understanding of what courts would do with some meta-info if they knew it existed/was collected on the other hand, that resilience to fraud is not a luxury we may reasonably be able to afford for long.