response 2 of 52:

Dec 17 14:11 UTC 2003

(could we get a refresher on why there is a verification policy and
on the arguments against having such a thing?)

(as I understand this initiative, it would replace the current policy
with a policy of accepting addresses as identification without 
verification.  does this mean physical addresses or does it include 
other addresses, such as e-mail addresses?  if it does include e-mail
addresses, would a Grex e-mail suffice?  wouldn't that be redundant?)

response 4 of 52:

Dec 17 14:24 UTC 2003

As I understand it, the basic reason for the verification policy is so that
we can identify the person or persons who use grex as a base of operations
for attacks on other systems.

I do not think the current system needs changing.

response 6 of 52:

Dec 17 16:08 UTC 2003

I think the major effect that the ID policy has is to discourage some people
from becoming members.  I don't know how big that pool is, but I am pretty
certain that among the pool are almost all the people who would abuse the
privileges that members get.

When Grex accepted credit cards back in 2000, there were a number of times
when credit cards were charged back because they were stolen.  That has
happened only once in the 3 years since we dumped direct credit card
processing and started using Paypal.  My conclusion is that there are people
out there who would like to buy memberships and use them for illicit
purposes, and we have an interest and a responsibility to try to prevent
them from doing so.

Now, this is a tradeoff, because I'm sure we discourage some legitimate
donors with our ID policy.  I'm fairly certain, though, that we also save
ourselves a lot of headaches.

I can think of a couple things we could do short of abolishing the
collection of ID altogether.  One is to accept a Paypal "verified address"
as valid ID.  I have never gone through the process to get a verified
account with Paypal, so I don't know exactly what's involved; perhaps
someone who has done it could tell us.  All I found was this page:
/----------------------------------------------------------------------\
| https://www.paypal.com/cgi-bin/webscr?cmd=p/gen/verification-outside |
\----------------------------------------------------------------------/
which says you need to prove you have a checking account (if you're in the
US) or a credit card (if you're outside the US).

Another thing we could do is do more to encourage people who don't want to
send ID to send donations anyway.  They wouldn't become members, but they
would be supporting the system.  Right now we have a page about that:
/------------------------------------------------\
| http://www.cyberspace.org/grexmart/donate.html |
\------------------------------------------------/
but there's not much to it.  We could promote this option a lot more.

It's true that the net has changed a lot since the ID policy was adopted,
and people are much more wary about giving out ID (I know I am).  So I
wouldn't be at all surprised to learn that this holds some people back
from becoming members.

I would caution everyone, though, not to assume that removing the ID
policy will result in everyone who doesn't like it becoming members.  A
while back a number of people complained that they couldn't be bothered to
write a check to Grex, and why didn't Grex accept credit cards?  But when
we did start accepting credit cards, many of them found a different
excuse, and never did become members.

response 10 of 52:

Dec 17 16:45 UTC 2003

I hope those whose expressed doubt about my feelings with regard to 
jp2's benevolent interest in Grex are reading this...