241–250 of 252 posts
Earlier quoted context omitted.
There is no password, just like Mullvad. You should "protect" your account number like you would a password, but also, you can just discard it and change to another one in a month, for example.
Thanks for your answer! Makes me curious how do you defend against people simply bruteforcing or guessing the account numbers.
It is a bit hard to evaluate the potential when you need to top up and do a captcha just for evaluation purposes. The barrier of entry is quite high.
To be clear, you don't need to top up (only click the link or try a search) _and_ do the captcha. You can _either_ top up for a month, _or_ do the proof-of-work captcha (should just be clicking a checkbox and giving it a few seconds). The reason for the higher barrier of entry is bots/abuse. Up until a few weeks ago we didn't even have the captcha option. Without any kind of identification, it's impossible to prevent…
Do you have Privacy Pass or some other type of privacy-preserving credentials functinoality?
Can you expand on the benefits of that when there is no personal information (not even an email or payment ID after 14 days) associated with an account?
Earlier quoted context omitted.
I see. We'll look into considering doing both, then. PolyForm Shield for the current code, with BUSL to transition into AGPLv3 after 2 or 3 years. Do you think that would work well?
Yeah. That would be great!
Earlier quoted context omitted.
Thanks, I see. You're still giving Amazon and Mullvad your payment information, so unless you're purchasing it for someone else, I'm failing to see the advantage? Again, that's something you can already do with Uruky as well.
The advantage is that it makes it impossible for Mullvad or Amazon to associate my online payment with the activation code on the card, and by extension my Mullvad account.
Earlier quoted context omitted.
Thanks! I have reached out over a week ago to them via email and Signal, to crickets. Let me know if you know why or how to reach them, or alternatives.
Hmm, they responded to me on Signal quickly at one point so unsure.