Unfortunately, the package is just a mono-wrapped version of keepass2, and in my experience runs equally as bad, if not worse, than keepass2 under WINE. Having used both for several months, I found the only workable…
I'm curious how you phoned them up, as they're quite adamant and public about not offering any sort of phone based point of contact.[1] [1] https://support.stripe.com/questions/do-you-have-a-phone-num...
A cool concept, however requiring login with Facebook for a site focused around anonymity is an unusual decision.
Although much simpler, this reminded me of a website from ~2008 which did the same thing with the now defunct Liberty Reserve combined with a basic coin flip game. The site is, surprisingly, still online[1] and now…
As it stands, the majority of CA's do not verify any of this information, besides a very cursory email verification. Exceptions would obviously include higher priced (OV/EV) certificates, which are no different…
Very cool, is there any ETA on parallel execution and background execution (ex: Currently, you have to stay on the page while the recipe executes.) Additionally, it seems that the more servers you have, the more you pay…
The term 'Gig' is a registered service mark (held by Fiverr) for uses related to "Operating on-line marketplaces for sellers of goods and/or services" [1] While this might not be a big consideration right now, this is…
http://arpnetworks.com/ Not a reseller, owns their hardware and operates their own BGP network (with route optimized bandwidth/peering none the less), provides out of band management (VNC) and direct access to MRTG…
I can't give you any input on the legal side of things, however I commented on a thread about 6 months ago regarding gift card fraud[1] and the assumption that it's a new phenomenon. With gift cards, especially…
DigitalOcean has a solid platform for the price, and we've personally had great experiences with them, with only intermittent downtime when their SFO location first launched. In terms of the suspension you're referring…
Are you considering offering paid plans by any chance? We'd be interested in using a service like this, but it would need to have a much lower interval to meet our needs.
Phishing for credit card information alone is extremely rare, as it doesn't make any financial sense to people whom are committing fraud, if someone were phishing they'd be interested in login information and identity…
I wouldn't say there is any higher potential for fraud, as they're essentially verifying the same about of data. It may make it slightly more difficult to recover funds if your card is used without your permission,…
As far as Giftango goes, they simply provide the platform, Whole Foods (or whomever is the actual gift card merchant) is responsible for any fraud which occurs due to abuse of the platform. Assuming the fraud was…
It's unlikely for a skimmed card to be used online in this fashion, because the thieves wouldn't typically have the CVV2, only the CVV1 which is included on the magnetic stripe track. Most merchants which offer gift…
Contrary to what the article states, this is almost definitely not due to skimming of any kind. It is most likely related to a database leak or breach, whether it is documented or not is another question. Also,…
riskScore is a combonation of hard coded scoring, along with what I'd equate to a bayesian filter. In a way, riskScore simplifies the calculation, because it's a percentage instead of an arbitrary number. Depending on…
Although we combine with internal scoring and manual review, as stated; If I was using MaxMind exclusively I'd consider 5.0 to 7.5 a good indicator of a possible fraudulent order. This is based on their current…
This would only work against very low level / amature phishing operations. Most of these systems not only validate user login information (often in real time) but also place live authorizations on cards to make sure…
An easy to implement solution would be to use MaxMind's fraud API prior to capturing card data. Although it's nowhere near fool proof it cuts out a good chunk of fraudulent orders. In our experience false positives have…
Agreed, hoping Zapier implements something like this soon. Basic transforms / Regex / Basic if statements applied to trigger inputs/outputs would be invaluable.
While I admire the effort and overall mission, the problem is that when an application promotes 'secure communications', there are people who actually may use it as such. Mistakes are understandable, however I think…
I can appreciate your desire to drive business to your company, as any of us would, but don't you think it would be prudent to add a disclaimer, or at minimum refer to yourself in the first person?
Hello Alan, I have a quick question for you which might be of interest to others as well: Why isn't SpiderOak open source yet? I've read your FAQ answer[1] on this, however it doesn't really give a concrete explanation,…
Nothing. That's a risk you take when using any proprietary software, however. I'd say the real world risk of this is (fairly) low, however if you're legitimately worried about it, you can use EncFS over a network share…
Unfortunately, the package is just a mono-wrapped version of keepass2, and in my experience runs equally as bad, if not worse, than keepass2 under WINE. Having used both for several months, I found the only workable…
I'm curious how you phoned them up, as they're quite adamant and public about not offering any sort of phone based point of contact.[1] [1] https://support.stripe.com/questions/do-you-have-a-phone-num...
A cool concept, however requiring login with Facebook for a site focused around anonymity is an unusual decision.
Although much simpler, this reminded me of a website from ~2008 which did the same thing with the now defunct Liberty Reserve combined with a basic coin flip game. The site is, surprisingly, still online[1] and now…
As it stands, the majority of CA's do not verify any of this information, besides a very cursory email verification. Exceptions would obviously include higher priced (OV/EV) certificates, which are no different…
Very cool, is there any ETA on parallel execution and background execution (ex: Currently, you have to stay on the page while the recipe executes.) Additionally, it seems that the more servers you have, the more you pay…
The term 'Gig' is a registered service mark (held by Fiverr) for uses related to "Operating on-line marketplaces for sellers of goods and/or services" [1] While this might not be a big consideration right now, this is…
http://arpnetworks.com/ Not a reseller, owns their hardware and operates their own BGP network (with route optimized bandwidth/peering none the less), provides out of band management (VNC) and direct access to MRTG…
I can't give you any input on the legal side of things, however I commented on a thread about 6 months ago regarding gift card fraud[1] and the assumption that it's a new phenomenon. With gift cards, especially…
DigitalOcean has a solid platform for the price, and we've personally had great experiences with them, with only intermittent downtime when their SFO location first launched. In terms of the suspension you're referring…
Are you considering offering paid plans by any chance? We'd be interested in using a service like this, but it would need to have a much lower interval to meet our needs.
Phishing for credit card information alone is extremely rare, as it doesn't make any financial sense to people whom are committing fraud, if someone were phishing they'd be interested in login information and identity…
I wouldn't say there is any higher potential for fraud, as they're essentially verifying the same about of data. It may make it slightly more difficult to recover funds if your card is used without your permission,…
As far as Giftango goes, they simply provide the platform, Whole Foods (or whomever is the actual gift card merchant) is responsible for any fraud which occurs due to abuse of the platform. Assuming the fraud was…
It's unlikely for a skimmed card to be used online in this fashion, because the thieves wouldn't typically have the CVV2, only the CVV1 which is included on the magnetic stripe track. Most merchants which offer gift…
Contrary to what the article states, this is almost definitely not due to skimming of any kind. It is most likely related to a database leak or breach, whether it is documented or not is another question. Also,…
riskScore is a combonation of hard coded scoring, along with what I'd equate to a bayesian filter. In a way, riskScore simplifies the calculation, because it's a percentage instead of an arbitrary number. Depending on…
Although we combine with internal scoring and manual review, as stated; If I was using MaxMind exclusively I'd consider 5.0 to 7.5 a good indicator of a possible fraudulent order. This is based on their current…
This would only work against very low level / amature phishing operations. Most of these systems not only validate user login information (often in real time) but also place live authorizations on cards to make sure…
An easy to implement solution would be to use MaxMind's fraud API prior to capturing card data. Although it's nowhere near fool proof it cuts out a good chunk of fraudulent orders. In our experience false positives have…
Agreed, hoping Zapier implements something like this soon. Basic transforms / Regex / Basic if statements applied to trigger inputs/outputs would be invaluable.
While I admire the effort and overall mission, the problem is that when an application promotes 'secure communications', there are people who actually may use it as such. Mistakes are understandable, however I think…
I can appreciate your desire to drive business to your company, as any of us would, but don't you think it would be prudent to add a disclaimer, or at minimum refer to yourself in the first person?
Hello Alan, I have a quick question for you which might be of interest to others as well: Why isn't SpiderOak open source yet? I've read your FAQ answer[1] on this, however it doesn't really give a concrete explanation,…
Nothing. That's a risk you take when using any proprietary software, however. I'd say the real world risk of this is (fairly) low, however if you're legitimately worried about it, you can use EncFS over a network share…