61–70 of 84 posts
Earlier quoted context omitted.
If it's default ports, you can just probe on login and deny it. We do this for a game I've admined for, and it's in the terms of service. Common L2TP, PPTP, etc.
Interesting. So if I put a terms of service discussing it on my blog can I nmap all my visitors?
Earlier quoted context omitted.
I'm Ryan, one of three devs that built FraudGuard.io. The answer is basically price. We do EVERYTHING ourselves and try to keep price extremely fair. We have plans that start at $10 /month and we also have a small free-for-life plan too. Thats the best answer. The secondary part is we want a simple way for any dev off the street to integrate with api.fraudguard.io in 5 minutes. Imagine you are a small company and you…
Hey Ryan, I applaud the free tier and think it's important, but I'd caution that it can be awfully hard to make a business-sustaining revenue on $10/mo. I think it's smart to start low and compete on price, but I think there's value here, it's why there are larger competitors in the space, and if you can climb that value chain and raise prices along the way you will be better off for it. From a merchandising POV, you…
This one I'm moving up the list - I like the idea "better yet just display the results of visitors IP"
Earlier quoted context omitted.
As a converse to this.... If you raise your price, you will only end up dealing with businesses that have identified a need for your product, and know exactly how much fraud and other issues cost them. With your price as is anyone can use it for any purpose, including those that don't involve losing money because of a fraud transaction. I considered using you for my site just to get GEO-IP. Sure, I could setup a geoi…
Look at the numbers again. 1,000,000 checks a month for $25? Even for an ad-supported site (using the checks for commenting) will get vastly more revenue and be able to afford it. Remember, at $10 for $100, he has to convert 10x the number of accounts. People that are considering setting up their own DB usually don't fall into the category of "good SaaS customers".
Earlier quoted context omitted.
Why would they increase the threat profile of an IP in any way at all ? An exit node, sure, but a relay? What possible threat could a relay pose?
Agreed it was a mistake on my part, I'll fix it up shortly to include only exit nodes.
Due to a similar IP reputation service, I couldn't pay my taxes from home this year, just because I had run a non-exit Tor relay recently. It's a big problem.
ETA: I'd also strongly recommend not marking an IP address specially in any way just for having a non-exit relay -- from what I've seen, the clients of IP reputation vendors also don't understand the distinction, so they block both kinds if told about both kinds. It's an attractive nuisance.
Earlier quoted context omitted.
> One of our biggest headaches is people who are evading bans by using VPNs (public or not), VPSes, etc. Although we've outright blocked some large chunks of IPs (AWS, for instance) Please don't do this. It's perfectly legitimate to route one's traffic through other nodes one owns. Please consider other ways of dealing with banned players — perhaps make creating an account slow and/or costly.
We've examined all the options. We already use browser fingerprinting, and that takes care of a good percentage of it, but for the truly committed there are really only two options: Blocking all VPNs, or using supercookies. I'm actually a bigger fan of the supercookie solution, but one of the other developers is staunchly against that. It's an ongoing battle. The problem with the slow/costly account thing is that one…
Earlier quoted context omitted.
Hey Ryan, I applaud the free tier and think it's important, but I'd caution that it can be awfully hard to make a business-sustaining revenue on $10/mo. I think it's smart to start low and compete on price, but I think there's value here, it's why there are larger competitors in the space, and if you can climb that value chain and raise prices along the way you will be better off for it. From a merchandising POV, you…
Ya this is really great info. Thanks for the feedback. We are still looking at pricing as this is only day one but we're on it. This one I'm moving up the list - I like the idea "better yet just display the results of visitors IP"
Earlier quoted context omitted.
Thats really great advice, we're talking about it on Slack now. Thanks
As a converse to this.... If you raise your price, you will only end up dealing with businesses that have identified a need for your product, and know exactly how much fraud and other issues cost them. With your price as is anyone can use it for any purpose, including those that don't involve losing money because of a fraud transaction. I considered using you for my site just to get GEO-IP. Sure, I could setup a geoi…
Earlier quoted context omitted.
Thats really great advice, we're talking about it on Slack now. Thanks
As a converse to this.... If you raise your price, you will only end up dealing with businesses that have identified a need for your product, and know exactly how much fraud and other issues cost them. With your price as is anyone can use it for any purpose, including those that don't involve losing money because of a fraud transaction. I considered using you for my site just to get GEO-IP. Sure, I could setup a geoi…
Earlier quoted context omitted.
It's my fault. I'll try to find a way to get this data and eventually adjust my code to not include non-exit relays or at least recategorize them as a lower severity.
Not your fault - not talking about your service specifically! My IP was banned by several other companies (I assume from a list that was purchased from a third party) like Hulu/Netflix because I was simply relaying non-exit traffic. TOR and people who speak for the service often say that it's safe to run a non-exit relay. It isn't. It's tracked and punished. I know from first-hand experience.