Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
I feel like these forums and the site have been especialy slow today..
RxKing... have i done something to offend you since your not answering me hun
LOL, all you say is true, but who is talking about pgp protecting you for something encryption has nothing to do with, such as a vendor writing down your information on a piece of paper, or buying drugs online? I was only referring to the security pgp is advertised to provide - assuring you that only the person you send your message to reads it. That's all it does, no more no less. PGP is an encryption for sending information. And it does that very well, that's what I was arguing. Who said it was anything more? That's like saying, since I was using pgp encryption to encrypt a message while I was driving 100MPH down the road in my car, I am safe from a cop catching me and giving me a ticket. Just because we use pgp encryption in the process of a transaction on SR, doesn't mean that we're safe from every possible security breach during each step and in every other facet of the transaction besides sending an encrypted message. The only safeguard pgp protects us from is the actual sending and receiving of an encrypted message. Anyone who thinks it is anything more is not too bright. That's why we talk about stealth packaging, going to many post offices to send multiple packages, and other safeguards. Because we know that other possible breaches of security require other solutions. And everyone on SR knows about most of these, especially stealth packaging. So when we talk about PGP encryption providing security, we're not talking about security for buying something on SR, we're talking only about security in sending and receiving a message - that's it.
we're talking only about security in sending and receiving a message - that's it.
You should tell that to BG and other vendors
I think you are not considering here what RxKing also is saying (and that I didn't consider too well at beginning myself): what you think is a "great" punishment (i.e. losing feedback and vendor status) it not really that much of an issue in practical terms. Given how BG has anyway already a solid customer base at his back and given how DPR is asking everyone to fully trust him again and help him to establish anew, the losing of the stats it is just symbolic in nature more than anything else.
In theory you are correct. However, in BG's case, and in many other vendors' case who only reship to the same address, if you only reship to the same address, then you obviously need a record.
...and I hope you can see where I am coming from.
Maybe this is what DPR wants: i.e. giving a sort of formal punishment that in practical terms however it is not a punishment.
On a side note, it is fair to assume that MOST, if not all, vendors who have a reship policy keep names, usernames and addresses for the record. Not doing so would require a tremendous amount of trust in buyers who are claiming a reship...Since transaction history is only kept for a month or so, so many buyer can say past that time that their order didn't arrive or something.... Vendors need to ensure that such and such buyer bought from them, what and how much, and where.
So I don't really blame BG for keeping that info, but I blame him for sending it unencrypted to some third party.
All you are doing essentially is taking away his original account name. And for what? I get what he did, I understand your position 100% and I happen to agree with it. I just do not understand at all you taking away his account. It seems silly.
I think the rationale is on the fact that the "punishment" is on the fact of losing all your feedback and privileges you obtain in these years with your hard work. BG would have to start from beginning having all the work done since now reset. It's true that DPR is encouraging people to work with BG anew, but still losing all your feedback and status you acquired is anyway a sure blow to your vendor capabilities and everyone knows this.
Going from being a top 5% vendor with more than 500 transactions and full feedback (I'm making up numbers here because I don't know personally what it was the status of BG before the demotion, I'm just making an example) to become a newbie with no history is surely not a nice thing for a vendor, no matter what.
Honestly you might be right. I did to BG exactly what I would have done to someone who was caught trying to get away with the same act, except I gave my opinion on the matter. I don't think we have only two types of vendors, honest and dishonest, and that their decisions are independent of precedent. If another vendor is faced with a similar situation and sees that BG was treated fairly and even praised for the honorable part of his behavior, then they too might follow his example and come clean. If that's the case, then my forgiving rhetoric will help keep people safe. Like I said in the OP, it wasn't an easy decision and it's hard to know the best path to take, but at some point you just have to act, learn as much as you can for the next tough decision, and eventually move on.
Ok we are both good vendors who play by the rules and don't keep addresses but lets face it vendors holding addresses is more commonplace than everyone lets on. You only have to look at the BlueGiraffe thread to see the extent of this and he only owned up because he got caught big time with the tormail breech. How many others do you think do it, I would guess 25% but that's just my opinion
I would hope if a vendor is going to hold your address they might at least have to decency to hold the encrypted pgp text and open it only if necessary which is better than the alternative where if it was sent through plaintext or pgp chances are more that they only save it plaintext.
I see pgp as a risk reducer, You see it as a waste of time or too complicated to learn, Not sure which but that's your choice and you proved those people wrong now..Congrats
I'm slightly wrong here, Of course it's of no greater risk to you to use privinote but where we differ is I view my security as being just as important as that that of my customers and the wider SR community where for you security means covering your own back.
But thing is if 100 buyers all get busted through privinote, media jumps on the bandwagon that SR is no longer safe then you might be safe but your business is gone.
It's just a personal thing, I want to look out for the welfare of my customers and wish them all the best as they reached out first to put trust in me. It gives me great job satisfaction to know I encourage safety and teach my buyers best practice, If privinote was compromised their details may also be compromised. If they send me their address through PGP then it's just between the two of us that's how it's safer.
We come from totally different sides of the spectrum on this, personal opinion again but I see you are from the states so I guess you grew up with the usual American ideas of individualism, personal responsibility and so on, At least it's evident that you only care to look out for yourself and don't worry about the welfare of others by your willingness to steal food from peppers in case of emergency (I think they are crazy too bty)
On the other hand I grow up in the Scandinavian welfare state model, where community values are more important over the individual or "communists" as your fellow Americans like to put it. I think more about looking out for others around me and good social systems to protect the weak and vulnerable.
Perhaps that is the reason we have prepper nuts in this part of the world because we don't believe in looking out for No.1 all the time.
I will continue to help my customers help themselves, you can continue to look out for yourself. I don't want to argue it's not going to go anywhere and I will leave this here.
?And...NO...you will not lose your SR account just for having a BMR account.
But from what I understand here it is against SR rule to provide a link to your vendor profile on BMR, Atlantis, ect.?
Why the fuck would you need to advertise those other sites on SR? Just read what the member above me says.... I can't fathom someone would need this pointed out to them. 
