Replying to Avatar Dr. Hax

This is literally what they are trying to force people to agree to:

"you must grant Onfido Inc. and its affiliates (together, Onfido), the service providers listed below (Providers), and the owner of this website/app (Company)

consent to collect, capture, obtain, possess, store, use, process, disclose and re-disclose (Process) your Biometric Data (defined below) and other personal data, including sensitive personal data (Personal Data), for the purpose described below."

I did not think an organization like 2600 would even agree to do business with a company like this. 🤮
Avatar
<old>cypherhoodlum 1y ago

Disappointing and very odd. Goes against the values of hacker culture.

Reply to this note

Please Login to reply.

Discussion

Avatar
Dr. Hax 1y ago

I've informed 2600 of the terms I was asked to agree to.

If nothing changes, we'll all know that this was their choice, not ignorance.

Avatar
Dr. Hax 1y ago

Someone responded saying my report has been passed along to the online store team.

While I think this was a colossal oversight, I'm holding out hope that they'll acknowledge these terms are absurd and that they're going to work towards changing their store so this information is no longer requested from their customers.

We shall see.

Avatar
Dr. Hax 1y ago

OK, 2600 confirmed they could reproduce the behavior, but claimed it was related to a VPN. I explained that it happened to me 100% of the time, not just when using a VPN or proxy. They did not comment on this.

I did not receive any indication that they are going to change any of their technology providers, but they did work with me so I could pay them directly instead of going through the KYC processors. I gave them a little extra for being willing to accomodate me.

I do hope the magazine is at least considering allowing people to pay without KYC. Even if it is a manual process like they did with me, I feel like that would show customers that they are still practicing what they preech. Even if that was just having text at checkout saying "if you want to pay without going through bitpay or coinbase, email them your order and they can provide a wallet address", it would be a meaningful gesture, IMO.

I get that these terms are not written by 2600, but 2600 decides whether they want to help companies with those terms profit, or if they want to choose another path.