Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

“Banclist.com is probably the most lucrative direct messaging platform”

twitter.com

Post reply on HN
Print view View original

51–60 of 77 posts

Re: “Banclist.com is probably the most lucrative direct messaging platform”

#51

Post by javert »

staunch wrote: post #41

Seems like we're missing a "StocList" for buying/selling shares in private companies. There are some "secondary market" services. But (IIRC) they all take a hefty cut from both parties, have zero transparency, act as an intermediary, have high minimum transactions, etc. Seems like accredited investors and private company stock owners should be able to make deals directly. Someone get on it!

If there is such a thing, I would absolutely love to find out about it. Even if only open to accredited investors.

Re: “Banclist.com is probably the most lucrative direct messaging platform”

#52

Post by avip »

dflock wrote: post #48
avip wrote: post #47

Earlier quoted context omitted.

It seems dir listing is not properly disabled https://banclist.com/app/webroot/img/

It it now, by the look of it.

Not an expert but I don't think it's considered good practice to expose your directory structure like that. It should have been 404 or redirection to /home.

Re: “Banclist.com is probably the most lucrative direct messaging platform”

#53

Post by [deleted] »

avip wrote: post #47
driverdan wrote: post #30

> Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16 mod_python/3.5.0- Python/2.7.5 Eek! I wouldn't trust them with my data if I was a bank. They haven't updated their server since 2013. All of the versions listed in that header have major vulns. This is a disaster waiting to happen.

It seems dir listing is not properly disabled https://banclist.com/app/webroot/img/

[deleted]

Re: “Banclist.com is probably the most lucrative direct messaging platform”

#55

Post by asark »

scott_s wrote: post #43
Quenty wrote: post #32

Earlier quoted context omitted.

But at least unregistered banks can’t name their company “Trust Bank” or something.

This is worth stressing: such regulations often exist to prevent fraud from outright scammers. If such a regulation did not exist, I am confident there would be institutions that called themselves a "bank" but met none of the basic consumer protections we expect from a bank.

Generally, it's a good idea to force labeling of businesses and products to match their potential customers' expectations of what they mean. It's one of those places where fostering a well-functioning free market (by decreasing information asymmetry, to put it succinctly, even if we're not talking outright scammers) is at odds with some strict notions of liberty (to call your business or product whatever you please).

Re: “Banclist.com is probably the most lucrative direct messaging platform”

#56

Post by hathawsh »

netsectoday wrote: post #42
driverdan wrote: post #30

> Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16 mod_python/3.5.0- Python/2.7.5 Eek! I wouldn't trust them with my data if I was a bank. They haven't updated their server since 2013. All of the versions listed in that header have major vulns. This is a disaster waiting to happen.

They really have no clue what they are doing... No security headers and their SSL is insecure. Someone needs to tell them to shut their servers down right now. Directly from their website: "Patrick Brown - Chief Technology Officer. Mr. Brown is the co-founder of Eye Candy Creative, a highly successful technology and marketing company." So their CTO is a marketing guy. No wonder they suck.

Yikes, Qualys SSL Labs gives them a grade of C. They may be vulnerable to a POODLE attack. They probably should disable SSL 3 support to protect their customers.

https://www.ssllabs.com/ssltest/analyze.html?d=banclist.com

Re: “Banclist.com is probably the most lucrative direct messaging platform”

#57

Post by javert »

staunch wrote: post #41

Seems like we're missing a "StocList" for buying/selling shares in private companies. There are some "secondary market" services. But (IIRC) they all take a hefty cut from both parties, have zero transparency, act as an intermediary, have high minimum transactions, etc. Seems like accredited investors and private company stock owners should be able to make deals directly. Someone get on it!

> There are some "secondary market" services. But (IIRC) they all take a hefty cut from both parties, have zero transparency, act as an intermediary, have high minimum transactions, etc.

Does anyone know of any such services that are reputable and worth using? Even if it's expensive. Kind of to be expected in that field.

Re: “Banclist.com is probably the most lucrative direct messaging platform”

#58

Post by microwavecamera »

saagarjha wrote: post #26
eridius wrote: post #23

Earlier quoted context omitted.

What about BancList indicates that the field is over-regulated

The fact that it's called "BancList"?

Would you also agree that any random company should be able to label themselves a hospital, pharmacy or university? If not, then there's your answer.

Re: “Banclist.com is probably the most lucrative direct messaging platform”

#59

Post by StavrosK »

> I imagine there was very little knocking on doors; founding team just called up everyone in their Rolodex, and after that point it's viral since the population of people who want to buy or sell one of 100 local banks definitely are interested in the 101st.

Ah, another company I could never ever have founded because its success explicitly depends on who you know.

Post reply on HN