[deleted]
FSFE supporters affected: Payment provider Nexi cancelled us
21–30 of 32 posts
Re: FSFE supporters affected: Payment provider Nexi cancelled us
#22[dead]
Re: FSFE supporters affected: Payment provider Nexi cancelled us
#23Reminds me of the famous "Our security auditor is an idiot. How do I give him the information he wants? [1] [1] https://serverfault.com/questions/293217/our-security-audito...
Right until the end I thought the guy was doing a social engineering penetration test, checking whether he could brow beat the server admins into bending over backwards to reveal this information.
Re: FSFE supporters affected: Payment provider Nexi cancelled us
#24Everytime people say bitcoin has no use case, I'd like to point them to cases like this.
I will bite. How do I set up recurring crypto payments/donations for my site? How big cut will be taken by intermediary?
OrvexPay and RequestNetwork both do that. Some answers here: https://gemini.google.com/share/830bc00cfd34
Re: FSFE supporters affected: Payment provider Nexi cancelled us
#25Everytime people say bitcoin has no use case, I'd like to point them to cases like this.
[dead]
Re: FSFE supporters affected: Payment provider Nexi cancelled us
#26Maybe now more F/OSS supporters will understand the need of Bitcoin/Monero
[dead]
Re: FSFE supporters affected: Payment provider Nexi cancelled us
#27Reminds me of the famous "Our security auditor is an idiot. How do I give him the information he wants? [1] [1] https://serverfault.com/questions/293217/our-security-audito...
Is there some part of PCI auditing requirements that is getting misinterpreted by some auditors to demand this? Though in my experience with standards like this what auditors want to see and what the standards say often have only loose overlap anyhow.
It's pretty counterintuitive from an auditing perspective. If the PCI standards require server racks to be painted red, it's entirely normal for an auditor to ask to see them, and very suspicious for you to say that they're in an encrypted box where nobody can check if they're red or not. I don't mean to excuse it, but I can understand how the error happens.
Re: FSFE supporters affected: Payment provider Nexi cancelled us
#28Earlier quoted context omitted.
Is there some part of PCI auditing requirements that is getting misinterpreted by some auditors to demand this? Though in my experience with standards like this what auditors want to see and what the standards say often have only loose overlap anyhow.
It's pretty counterintuitive from an auditing perspective. If the PCI standards require server racks to be painted red, it's entirely normal for an auditor to ask to see them, and very suspicious for you to say that they're in an encrypted box where nobody can check if they're red or not. I don't mean to excuse it, but I can understand how the error happens.
This is true. Maybe it's someone seeing a requirement like "all passwords must conform to these rules" and deciding that it means they need to check them directly, instead of looking at the systems that enforce that constraint.
Re: FSFE supporters affected: Payment provider Nexi cancelled us
#29The FSFE justly drew the line at providing private information of supporters. How many other customers of Nexi simply handed over such data 'because audit'?
So this was not only about FSFE and payments for them but a general audit of their (Nexi's) customers ?
Nexi’s mid-2025 statement notes that they’re finalizing imposition of a ‘one process, all subsidiaries’ auditing costs reduction program across all of their subsidiary banks. The FSFE was likely being (incorrectly) audited under business-provides-services rules imposed by the parent megacorp, rather than as whatever human-led interpretation the bank had used formally, or as whatever charities or PACs are called in the EU. Ironically, had they switched exclusively to freedom-restricted passkeys, they could have structured their credentials store to divulge no private information and no usable credentials while formally complying with the bank’s efforts to find cause to fire them as a customer. But I think the bank would still have just found another way to fire them regardless.
Re: FSFE supporters affected: Payment provider Nexi cancelled us
#30The FSFE justly drew the line at providing private information of supporters. How many other customers of Nexi simply handed over such data 'because audit'?
So this was not only about FSFE and payments for them but a general audit of their (Nexi's) customers ?
Yeah, using the word "cancelled" that way in the title is... hyperbolic, even if it is technically true that the contract was cancelled.