fix CDFI tags

This commit is contained in:
cyberMonk 2021-02-01 17:47:21 -05:00
parent 53b5fb8c39
commit 8531a50f17
1 changed files with 9 additions and 9 deletions

View File

@ -38,12 +38,12 @@ hCAPTCHA:
| ***Financial institution*** | ***Values-based network*** | ***Blocks Tor*** | ***CloudFlared*** | ***hCAPTCHA*** | ***Locations*** | ***Notes*** |
|--|--|--|--|--|--|--|
| [Beneficial State Bank](https://www.beneficialstatebank.com) | [B Corp](https://bcorporation.net/directory/beneficial-state-bank), [GABV](http://www.gabv.org/members/beneficial-state-bank), ~~[CDFI](https://www.cdfifund.gov/Documents/CDFI%20Cert%20List%2001-14-2020%20Final.xlsx)~~ || 👁 | y | California, Oregon, Washington| It's in a hidden row on the CDFI spreadsheet. Does that imply deletion? They [claim](https://beneficialstatebank.com/web-accessibility): "we have taken definitive steps to follow Web Content and Accessibility Guidelines (WCAG)," but their CloudFlared login portal imposes an hCAPTCHA which violates WCAG. BSB admits in their [privacy policy](https://beneficialstatebank.com/uploads/files/BSB-Consumer-Privacy-Act-CCPA-Privacy-Notice-Current-6.4.2020.pdf#page=2) that they collect your IP address to track your geoloctation. They also vaguely state that they share your sensitive information with third parties, but they do not name the third parties (thus sharing with CloudFlare, Inc. is concealed). |
| [Clearwater Credit Union](http://web.archive.org/web/www.clearwatercreditunion.org) | [GABV](http://www.gabv.org/members/clearwater-credit-union) || 👁 | y | ? | hCAPTCHA is pushed by CloudFlare and thus triggered unpredictably. Their [vague privacy policy](https://web.archive.org/web/20201027053008/https://clearwatercreditunion.org/privacy-security-policy) conceals the fact that they share all web traffic with CloudFlare, Inc. |
| [Beneficial State Bank](https://www.beneficialstatebank.com) | [B Corp](https://bcorporation.net/directory/beneficial-state-bank), [GABV](http://www.gabv.org/members/beneficial-state-bank), [CDFI](https://www.cdfifund.gov/sites/cdfi/files/2020-11/cdfi-cert-list-10-14-2020-final.xlsx), [UNEPFI](https://www.unepfi.org/banking/bankingprinciples/signatories), [Just.](http://justorganizations.com/node/45) || 👁 | y | California, Oregon, Washington| They [claim](https://beneficialstatebank.com/web-accessibility): "we have taken definitive steps to follow Web Content and Accessibility Guidelines (WCAG)," but their CloudFlared login portal imposes an hCAPTCHA which violates WCAG. BSB admits in their [privacy policy](https://beneficialstatebank.com/uploads/files/BSB-Consumer-Privacy-Act-CCPA-Privacy-Notice-Current-6.4.2020.pdf#page=2) that they collect your IP address to track your geoloctation. They also vaguely state that they share your sensitive information with third parties, but they do not name the third parties (thus sharing with CloudFlare, Inc. is concealed). |
| [Clearwater Credit Union](http://web.archive.org/web/www.clearwatercreditunion.org) | [GABV](http://www.gabv.org/members/clearwater-credit-union), [CDFI](https://www.cdfifund.gov/sites/cdfi/files/2020-11/cdfi-cert-list-10-14-2020-final.xlsx) || 👁 | y | ? | hCAPTCHA is pushed by CloudFlare and thus triggered unpredictably. Their [vague privacy policy](https://web.archive.org/web/20201027053008/https://clearwatercreditunion.org/privacy-security-policy) conceals the fact that they share all web traffic with CloudFlare, Inc. |
| [Decorah Bank & Trust Company](https://web.archive.org/web/www.decorahbank.com) | [GABV](http://www.gabv.org/members/decorah-bank-trust-company) || 👁 || Iowa | Their [privacy policy](https://www.decorahbank.com/legal-information/privacy-policy) lies. Since CloudFlare sees all traffic, these are false statements: "we will not give your data to third parties without your permission."; "you will never be required to give information to a third party supplier." |
| [First Green Bank](https://web.archive.org/web/www.firstgreenbank.com) | ~~B Corp~~, [GABV](http://gabv.org) || 👁 | y | Florida | A 3rd party site said they were B Corp listed, but they aren't listed on the B Corp site. hCAPTCHA is pushed by CloudFlare and thus triggered unpredictably. They don't even have a proper privacy policy, but their "[privacy commitment](https://web.archive.org/web/20201129095019/https://www.firstgreenbank.com/privacy-commitment)" statement conceals the fact that all web traffic is shared with CloudFlare, Inc. |
| [Mascoma Savings Bank](http://www.mascomabank.com/) | [B Corp](https://bcorporation.net/directory/mascoma-bank) | 👁 || ? | New Hampshire, Vermont |||
| [Missoula Federal Credit Union](https://web.archive.org/web/missoulafcu.org/) | ~~[GABV](http://gabv.org/the-community/members/banks)~~, ~~CDFI~~ || 👁 | y | Montana | A 3rd party site said they were a GABV member, but they aren't listed on the GABV site. They also don't exist in the [CDFI spreadsheet](https://www.cdfifund.gov/Documents/CDFI%20Cert%20List%2001-14-2020%20Final.xlsx) |
| [Missoula Federal Credit Union](https://web.archive.org/web/missoulafcu.org/) | ~~[GABV](http://gabv.org/the-community/members/banks)~~, ~~CDFI~~ || 👁 | y | Montana | A 3rd party site said they were a GABV member, but they aren't listed on the GABV site. They also don't exist in the [CDFI spreadsheet](https://www.cdfifund.gov/sites/cdfi/files/2020-11/cdfi-cert-list-10-14-2020-final.xlsx) |
| [National Cooperative Bank](http://www.ncb.coop) | [GABV](http://www.gabv.org/members/national-cooperative-bank) ||| y | ? | hCAPTCHA pushed to Tor users (untested for non-Tor users) |
## Graylisted banks
@ -58,7 +58,7 @@ and GABV seem to have been dropped.
| [Lead Bank](https://lead.bank) | [GABV](http://www.gabv.org/members/lead-bank) | Missouri | Paper statements are $5, but they say they're willing to email statements if the website stops working for a customer's browser; **Amazon AWS-hosted**; online reg. open to out-of-state residents; [Moneypass ATMs](https://www.moneypass.com/atm-locator.html) |
| [New Resource Bank](https://newresourcebank.com/) | ~~B Corp~~, ~~[GABV](http://gabv.org/the-community/members/banks)~~ | California | A 3rd party site said they were both B Corp listed and a GABV member, but they aren't listed on either site. Website also harasses Tor users about having a clock that's ahead. |
| [Piscataqua Savings Bank](https://piscataqua.com) | [B Corp](https://bcorporation.net/directory/piscataqua-savings-bank) | New Hampshire | **Amazon AWS-hosted**; online reg. open to out-of-state residents |
| [Sunrise Banks](https://sunrisebanks.com) | [B Corp](https://bcorporation.net/directory/sunrise-banks), [GABV](http://www.gabv.org/members/sunrise-community-banks), ~~[CDFI](https://www.cdfifund.gov/Documents/CDFI%20Cert%20List%2001-14-2020%20Final.xlsx)~~ | Minnesota | It's in a hidden row on the CDFI spreadsheet. Does that imply deletion? **Google Cloud-hosted** |
| [Sunrise Banks](https://sunrisebanks.com) | [B Corp](https://bcorporation.net/directory/sunrise-banks), [GABV](http://www.gabv.org/members/sunrise-community-banks), [CDFI](https://www.cdfifund.gov/sites/cdfi/files/2020-11/cdfi-cert-list-10-14-2020-final.xlsx) | Minnesota | **Google Cloud-hosted** |
| [Verity Credit Union](https://www.veritycu.com) | [GABV](http://www.gabv.org/members/verity-credit-union) | Washington | **Amazon AWS-hosted** |
## Whitelist: relatively ethical banks
@ -69,13 +69,13 @@ or anti-consumer website features.
| ***Financial institution*** | ***Values-based network*** | ***Locations*** | ***Notes*** |
|--|--|--|--|
| [Amalgamated Bank](https://www.amalgamatedbank.com) | [B Corp](https://bcorporation.net/directory/amalgamated-bank), [GABV](http://www.gabv.org/members/amalgamated-bank-usa)| New York, Washington, D.C.| Previously blocked Tor, but not when checked in Jan. 2021, so it's back on the whitelist for now. |
| [Amalgamated Bank](https://www.amalgamatedbank.com) | [B Corp](https://bcorporation.net/directory/amalgamated-bank), [GABV](http://www.gabv.org/members/amalgamated-bank-usa), [UNEPFI](https://www.unepfi.org/banking/bankingprinciples/signatories) | New York, Washington, D.C.| Previously blocked Tor, but not when checked in Jan. 2021, so it's back on the whitelist for now. |
| [Aspiration](https://www.aspiration.com/) | [B Corp](https://bcorporation.net/directory/aspiration) | *N/A* (online only) | Previously blocked Tor, but not when checked in Jan. 2021, so it's back on the whitelist for now. |
| [Brattleboro Savings & Loan](https://www.brattbank.com) | [B Corp](https://bcorporation.net/directory/brattleboro-savings-loan) | Vermont ||
| [City First Bank of DC](https://www.cityfirstbank.com) | [B Corp](https://bcorporation.net/directory/city-first-bank), [GABV](http://www.gabv.org/members/city-first-bank), ~~[CDFI](https://www.cdfifund.gov/Documents/CDFI%20Cert%20List%2001-14-2020%20Final.xlsx)~~ | Washington, D.C.| It's in a hidden row on the CDFI spreadsheet. Does that imply deletion? Online application [available](https://www.cityfirstbank.com/sites/default/modules/ckeditor/ckfinder/userfiles/files/PersonalAccount.pdf), so perhaps it's open to out-of-state clients. |
| [Southern Bancorp](https://banksouthern.com/) | [B Corp](https://bcorporation.net/directory/southern-bancorp-inc), [GABV](http://www.gabv.org/members/southern-bancorp), ~~[CDFI](https://www.cdfifund.gov/Documents/CDFI%20Cert%20List%2001-14-2020%20Final.xlsx)~~ | Arkansas, Mississippi | It's in a hidden row on the CDFI spreadsheet. Does that imply deletion? |
| [Spring Bank](https://springbankny.com/) | [B Corp](https://bcorporation.net/directory/spring-bank), ~~[CDFI](https://www.cdfifund.gov/Documents/CDFI%20Cert%20List%2001-14-2020%20Final.xlsx)~~ | New York | It's in a hidden row on the CDFI spreadsheet. Does that imply deletion? Website down as of Jan. 2021 |
| [VCC Bank](http://www.vacommunitycapital.org/ways-to-invest/products/) | [B Corp](https://bcorporation.net/directory/virginia-community-capital), ~~[CDFI](https://www.cdfifund.gov/Documents/CDFI%20Cert%20List%2001-14-2020%20Final.xlsx)~~ | Virginia | It's in a hidden row on the CDFI spreadsheet, but VCC attests on their site that they are CDFI-certified; Fastly-hosted; there is an online application, so perhaps it's open to out-of-state clients. |
| [City First Bank of DC](https://www.cityfirstbank.com) | [B Corp](https://bcorporation.net/directory/city-first-bank), [GABV](http://www.gabv.org/members/city-first-bank), [CDFI](https://www.cdfifund.gov/sites/cdfi/files/2020-11/cdfi-cert-list-10-14-2020-final.xlsx) | Washington, D.C.| Online application [available](https://www.cityfirstbank.com/sites/default/modules/ckeditor/ckfinder/userfiles/files/PersonalAccount.pdf), so perhaps it's open to out-of-state clients. |
| [Southern Bancorp](https://banksouthern.com/) | [B Corp](https://bcorporation.net/directory/southern-bancorp-inc), [GABV](http://www.gabv.org/members/southern-bancorp), [CDFI](https://www.cdfifund.gov/sites/cdfi/files/2020-11/cdfi-cert-list-10-14-2020-final.xlsx) | Arkansas, Mississippi ||
| [Spring Bank](https://springbankny.com/) | [B Corp](https://bcorporation.net/directory/spring-bank), [CDFI](https://www.cdfifund.gov/sites/cdfi/files/2020-11/cdfi-cert-list-10-14-2020-final.xlsx) | New York | Website down as of Jan. 2021 |
| [VCC Bank](http://www.vacommunitycapital.org/ways-to-invest/products/) | [B Corp](https://bcorporation.net/directory/virginia-community-capital), [CDFI](https://www.cdfifund.gov/sites/cdfi/files/2020-11/cdfi-cert-list-10-14-2020-final.xlsx) | Virginia | Fastly-hosted; there is an online application, so perhaps it's open to out-of-state clients. |
| [VSECU (Vermont State Employees Credit Union)](https://www.vsecu.com/) | [GABV](http://www.gabv.org/members/vermont-state-employees-credit-union-vsecu-usa) | Vermont ||
The scope of this page is US banks. Some ethical European banks are listed by [FEBEA](https://febea.org/map/node) and [GABV](http://gabv.org) covers the world.