4 ms·
> JUST STOP MASS BLOCKING. You literally have no reason to. The only reason would be if you have an agenda to stop people from anonymously accessing information
by jmclnx 4y ago
> JUST STOP MASS BLOCKING. You literally have no reason to. The only reason would be if you have an agenda to stop people from anonymously accessing information
This is my take, who cares were people accessing the site is from. The only places that should kind-of care are Banking Sites.
- tentacleuno 4y agoI wouldn't login to my bank via Tor. So far though, both the financial websites I use don't care that I use a VPN.
- uconnectlol 4y agoI logged into my bank through Tor for 10 years no problem. Until they blocked it.
- officialjunk 4y agoi've never used tor, but wouldn't it be better operational security to not use tor for banking to avoid being fingerprinted/identified, if one cared about remaining anonymous?
- teawrecks 4y agoFingerprinted/ID'ed by who? There is effectively no difference in security with tor when it comes to the end points. The main purpose of tor is to prevent anyone in the middle from getting any information.
- sweetjuly 4y agoAll they'll get is a strong ID on your exit node. That node is, of course, shared by a ton of people and so trying to pick apart the traffic is going to be very difficult
- tentacleuno 4y agoYou can, but I don't feel like risking being locked out of my main checking account. Mind you, Mullvad VPN seems to be working totally fine so far...
- brnt 4y agoI once did, to make a payment. Only at the end did I realize I was in a TOR window. All went through fine. I guess there is no reason not to, if login and 2F check out.
- slothsarecool 4y agoBanking sites and anybody who suffers from any sort of attack, whether it's scraping, DDoS, bots, bruteforcing... Does everybody get those attacks? Probably not, however, Cloudflare centralizes the attacks into a single IP reputation database so, if at some point, a certain node was abused on x site that uses Cloudflare, anybody who is routed through that node will have a poor experience browsing CF sites. This approach of centralizing IP reputations has its own flaws and benefits, Tor Nodes aren't inherently given a bad reputation, it just happens that if 90 people are using the tool for all the good things, 2 assholes can abuse the IPs and have them blacklisted on almost any website, whether it's Cloudflare, Imperva, Akamai, PX, you name it. Cloudflare is the most known name but there are tons of other E2E/B2B providers that don't show up as often.
- lwansbrough 4y agoThe main use case of Cloudflare is not blocking for fun. We use it to defend against DDoS and and botting which are existential threats to our business.
- __turbobrew__ 4y agoSome businesses just have no reason to interact with certain IP sets. For example if you are running a SaaS website which only caters to customers in the US what is the advantage of letting IPs from China or Russia access your service? Those IPs are not going to utilize your service because you don’t offer services outside of the US; since the IPs cannot be used for legitimate actions they can therefore only be used for illegitimate actions and should be blocked.
- fathyb 4y agoA B2B SaaS is very likely to have US based customers with employees working remotely from all over the world, either temporarily or permanently.
- decremental 4y agoMost US businesses don't have employees outside the US and you probably aren't catering to the ones that do.
- AnimalMuppet 4y agoPersonally, I wouldn't deliberately signal "I'm too small time for you Fortune 500 outfits to bother with". But even if you don't mind doing so... Our company didn't have any outside-the-US employees - until we did. We hired one remote in Canada, and we hired some contractors in the Philippines and Portugal. So you're creating a situation where either you have to fix your ability to let people connect from outside the US right now (with all the security issues that may cause, which you also have to fix right now), or else you lose a customer each time something like that happens.
- scrose 4y agoChances are they won’t block IPs in the countries they have employees, and/or they’ll require a VPN for them. I’m honestly a bit surprised to see so many people attempting to counter the idea that some businesses don’t need to be accessible from every region in the world.