20
KYC is becoming: know your customer’s customers. FSFE’s payment provider “Nexi” canceled them w/out notice for not sharing info about donors (yes, in a GDPR region) (fsfe.org)
submitted 7 months ago by to c/cash@slrpnk.net
3 comments fedilink hide all child comments

all 3 comments

sorted by: hot top controversial new old
[–] 8 points 7 months ago (1 child)

Who the fuck demands the passwords of users? If you're doing basic security you shouldn't even be able to get the passwords of the users, just the password hashes. Even then I wouldn't give that shit out ever.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] [S] 2 points 7 months ago* (last edited 7 months ago)

    Oh shit.. I didn’t even think about the PWs.. that slipped passed me. I got to usernames and thought about how obnoxious it was to demand any info regarding someone else’s customers. But indeed the demand for passwords should perhaps even warrant a police investigation. Nexi clearly has no competency for working in the financial sector.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 5 points 7 months ago

    Name and shame in the title. These ghouls deserve every piece of negative press.

  • permalink
  • fedilink
  • source
    •
    4 comments in c/gdpr@sopuli.xyz view that post
    [+] 4 points 7 months ago (3 children)
    [deleted]
  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] [S] 2 points 7 months ago (2 children)

    Indeed that was why I called it out. To stress what shit is happening despite the GDPR. Violations are rampant and enforcement is sparse.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [+] 1 point 7 months ago (1 child)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] [S] 2 points 7 months ago* (last edited 7 months ago)

    Data subjects have a right to complain under art.77 to the extent their own data is involved. But I am not a data subject in this case.

    I could still complain, but it would not have the force of art.77. It would basically be a request that the DPA voluntarily investigate in an “ex officio” capacity -- on the DPAs own initiative (if they care to do so). I’ve done that before and the DPA simply ignored the complaint. I did not even get an acknowledgement.

  • permalink
  • fedilink
  • source
  • parent