From fbab3fe15302ef54d00fdd21962fe11af7e63609 Mon Sep 17 00:00:00 2001 From: cyberMonk Date: Fri, 14 May 2021 15:05:15 -0400 Subject: [PATCH] blacklisted Amalgamated Bank for Tor-hostility --- usa_banks.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/usa_banks.md b/usa_banks.md index 02a3b89..692195b 100644 --- a/usa_banks.md +++ b/usa_banks.md @@ -38,6 +38,7 @@ their customers to the privacy and netneutrality | ***Financial institution*** | ***Values-based network*** | ***Blocks Tor*** | ***CloudFlared login page*** | ***hCAPTCHA*** | ***Locations*** | ***Notes*** | |--|--|--|--|--|--|--| +| [Amalgamated Bank](https://www.amalgamatedbank.com) | [B Corp](https://bcorporation.net/directory/amalgamated-bank), [GABV](http://www.gabv.org/members/amalgamated-bank-usa), [UNEPFI](https://www.unepfi.org/banking/bankingprinciples/signatories) | 👁 ||| New York, Washington, D.C. (worldwide charter)| Sales site permits Tor but [transactional site](https://cibng.ibanking-services.com) blocks Tor and it's **akamai-hosted**. | | [Beneficial State Bank](https://www.beneficialstatebank.com) | [B Corp](https://bcorporation.net/directory/beneficial-state-bank), [GABV](http://www.gabv.org/members/beneficial-state-bank), [CDFI](https://www.cdfifund.gov/sites/cdfi/files/2020-11/cdfi-cert-list-10-14-2020-final.xlsx), [UNEPFI](https://www.unepfi.org/banking/bankingprinciples/signatories), [Just.](http://justorganizations.com/node/45) || 👁 | n (previously yes) | California, Oregon, Washington| They incorrectly [claimed](https://beneficialstatebank.com/web-accessibility): "we have taken definitive steps to follow Web Content and Accessibility Guidelines (WCAG)" when their Cloudflared login portal imposed an hCAPTCHA, which violated WCAG but they no longer push the hCAPTCHA. BSB admits in their [privacy policy](https://beneficialstatebank.com/uploads/files/BSB-Consumer-Privacy-Act-CCPA-Privacy-Notice-Current-6.4.2020.pdf#page=2) that they collect your IP address to track your geoloctation. They also vaguely state that they share your sensitive information with third parties, but they do not name the third parties (thus sharing with CloudFlare, Inc. is concealed). The landing page is not CloudFlared, but the login page (xvault.beneficialstatebank.com) is, which enables CloudFlare to eavesdrop on your banking. | | [Brattleboro Savings & Loan](https://www.brattbank.com) | [B Corp](https://bcorporation.net/directory/brattleboro-savings-loan) | 👁 ||| Vermont | Sales site permits Tor but [transactional site](https://www.brattbankonline.com) blocks Tor. | | [City First Bank of DC](https://www.cityfirstbank.com) | [B Corp](https://bcorporation.net/directory/city-first-bank), [GABV](http://www.gabv.org/members/city-first-bank), [CDFI](https://www.cdfifund.gov/sites/cdfi/files/2020-11/cdfi-cert-list-10-14-2020-final.xlsx) | 👁 ||| Washington, D.C., Southern CA (worldwide charter) | Sales site permits Tor but [transactional site](https://olb.cityfirstbank.com) blocks Tor. Online application [available](https://www.cityfirstbank.com/sites/default/modules/ckeditor/ckfinder/userfiles/files/PersonalAccount.pdf), so perhaps it's open to out-of-state clients. Recent merger with a bank in Southern California. | @@ -68,13 +69,12 @@ hosting to an unethical and untrustworthy tech giant. ## Whitelist: relatively ethical banks -These banks are endorsed by a values-based network, and are properly -hosted. Superficially, there are no obvious significant anti-privacy -or anti-consumer website features. +These banks are endorsed by a values-based network or convey an +ethical mission, and are properly hosted. Superficially, there are no +obvious significant anti-privacy or anti-consumer website features. | ***Financial institution*** | ***Values-based network*** | ***Locations*** | ***Notes*** | |--|--|--|--| -| [Amalgamated Bank](https://www.amalgamatedbank.com) | [B Corp](https://bcorporation.net/directory/amalgamated-bank), [GABV](http://www.gabv.org/members/amalgamated-bank-usa), [UNEPFI](https://www.unepfi.org/banking/bankingprinciples/signatories) | New York, Washington, D.C. (worldwide charter)| Previously blocked Tor, but not when checked in Jan. 2021, so it's back on the whitelist for now. | | [First Boulevard](https://bankblvd.com) || online-only | This bank is not yet open for business. Its focused on shrinking the racial wealth gap and has partnered with Visa to offer crypto-trading capabilities. Note that involvement with Visa is cause for concern, as Visa is the most aggressive proponent of the unethical war on cash. It also appears they may be strictly mobile, which likely means forced use of Google Playstore. First Boulevard is not a bank - banking outsourced to Central Bank of Kansas City. | The scope of this page is US banks. Some ethical European banks are listed by [FEBEA](https://febea.org/map/node) and [GABV](http://gabv.org) covers the world.