Living 20 minutes into the future. Eccentric weirdo. Virtual Adept. Time traveler. Thelemite. Technomage. Hacker on main. APT 3319. Not human. 30% software and implants. H+ - 0.4 on the Berram-7 scale. Furry adjacent. Pan/poly. Burnout.
I try to post as sincerely as possible.
The only way you won’t have to provide PII is if you buy it from someone outside of the exchange ecosystem (from somebody face to face with cash or a gift card (note: Local Bitcoin has been gone for about a year now)). Exchanges have to comply with KYC (Know Your Customer) laws if they want to operate in the US, which is why they’re asking for PII.
Librewolf on my personal laptop.
LEOs using what amount to phishing attacks to grab folks looking for CSAM has a long and storied history behind it.
for compliance we’d have to get everything re-vetted yearly
It really depends on the company. When I was working for that company a few jobs back, we crunched the numbers and the cost of C&C and IV&V (Certification and Accreditation; Independent Verification and Validation) for an in-house TOTP had one more zero to the left of the decimal point than the Twilio bill (added up for the year). Plus, for compliance we’d have to get everything re-vetted yearly.
That’s kinda of the definition of government contracting. :) I think the only US government org that has actual govvies doing anything other than management is NASA.
In case anybody’s curious about what those are:
The biggest reason they use phone calls or SMS, however, is because they don’t want to go to the hassle of getting an in-house MFA service (a TOTP backend, in other words), approved, pen tested, analyzed, verified… all things considered, it’s faster and easier to go with a service like Twilio that already did all that legwork. A couple of years back I worked for a company in just that position, and after we did all the legwork, research, and consultation with the independent third party specialists trying to run our own TOTP would have easily doubled the yearly cost because of all the compliance stuff.
The golden rule: “He who has the gold makes the rules.”