@katrinakatrinka @digyoursoul @molly0xfff granted, compared to #CustomerProtection and #Regulations in the #EU, #finance inctue #USA is a shitshow.

• #Carding as a form of #fraud doesn't really exist here, and the few possibilities does.with #PSD2 mandating #3Dsecure in #SEPA member nations...

@ashleyspencer @sunguramy well, #Carding is a "data breach" tho like all #platforms, #Shopify wants to enshure it's customers can't just easily migrate to a different platform, so they do leverage #VendorLockIn as much as they can get away, and since they are a #B2B platform, they can get away with a a lot of stuff they couldn't legally if they were catering to #consumers...

• And since they lockdown their platform that also means they are in control (and given that platforms like Shopify specifically cater to the "#TechIlliterate" sellers that also means protecting said sellers from messing up their setup with 3rd party stuff they can't vet.

After all, I've been on the 'lever-end' myself, acting as "#BenevolentDictator" on many occasions to prevent people from messing up stuff for similar reasons...

@ashleyspencer @sunguramy and they don't have like an #API to just #curl said image files with?

I mean that certainly prevents most #MageCart-Style #Carding attacks that plague #WooCommerce & #Magento-based #Webshop systems...

@standev @mvilain @jerry That's propably because of that.

• I know companies that'll instantly block any domain registered or adminitrated or linked to #GoDaddy, #NameCheap, #NiceNIc, #CloudFlare or #ProtonMail due to rampant #spam, #scams and abuse by #CyberCrime groups.

In fact I did that - alongside #Geoblocking - to prevent and deter #carding attempts at a fmr. employer.

• And like many modern sites, attempts of registering an account would just get #blackholed without any notification and said IPs [the entire block allocation as per WHOIS!] temporarily blocklisted for 24 hours.

Granted this wasn't my decision but basically what the CLO & CFO saw fit as "cybersecurity and risk avoidance strategy" towards regulatory pressure by @bsi & @BaFin ...