431
submitted 2 months ago* (last edited 2 months ago) by pantherina@feddit.org to c/opensource@lemmy.ml
you are viewing a single comment's thread
view the rest of the comments
[-] pulsewidth@lemmy.world 139 points 2 months ago

Over the past few months, our former payment provider Nexi S.p.A. (“Nexi”) requested access to private data, which we understood to be specifically the usernames and passwords of our supporters. We have refused this request. All our attempts to clarify Nexi’s request, or to understand how their need for such information was necessary and legal, were met with what we consider to be vague and unsatisfactory explanations relating to a general need for risk analysis.

Y tho. What in fuck does a payment provider have to do with asking for this?

[-] ramble81@lemmy.zip 74 points 2 months ago

…and passwords

Um, excuse me? For starters they should only ever have hashes, but there is never a valid reason to ask for that many passwords.

[-] Undertaker@feddit.org 19 points 2 months ago

Many? Not for one

[-] diablomnky666@lemmy.wtf 5 points 2 months ago

Missed opportunity for them to troll Nexi and just send them:

Usernames Passwords hunter2 hunter2

[-] HiddenLayer555@lemmy.ml 31 points 2 months ago

Is this not against GDPR? I feel like this would be a slam dunk case.

[-] unwarlikeExtortion@lemmy.ml 14 points 2 months ago

FSFE should report them to the GDPR authority, but also financial ones.

The article says Nexi reached out after 'cancelling' the contract - meaning FSFE was financially offline for those few days. If it were a 'normal' business this was done to, they would sue for damages to hell and back.

And so should FSFE.

[-] Melvin_Ferd@lemmy.world 11 points 2 months ago

How come there's never a name attached to these things.

[-] listless@lemmy.cringecollective.io 12 points 2 months ago

As in a name reporting the issue, or a name from the payment provider?

It's on the FSFE homepage if you need confirmation of the story: https://fsfe.org/news/2026/news-20260316-01.en.html

[-] Melvin_Ferd@lemmy.world 3 points 2 months ago

I mean the name of the people who are originating these ideas. We should be putting names like who are the executives.

They get away with this stuff because they're faceless organizations or higher ups beyond consequences.

I just see so many systems in place that are there to allow these things to trample us and nobody in this generation challenges. Like the opposition to authority in this generation just seems like they're apart of the authority. They're also playing they're role.

this post was submitted on 17 Mar 2026
431 points (99.5% liked)

Open Source

46990 readers
101 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 6 years ago
MODERATORS