Re: Just use Tor.
There are many cases where hostile sites block Tor exit nodes, and shopping through one subjects you to much more extensive 2fa, but the more people who use Tor, the more accommodating they will become.
With respect, I disagree. I have as yet to see a single instance of someone originating from a Tor node actually reading or using the sites I manage. Every single one of the Tor-originated visits was about running some sort of attempt to breach the site or use hacks that may have been installed already.
Ergo, from a risk management perspective I am about to lock out people that use Tor (source: paid-for Maxmind). The stats show it will not lose any business, but it sure improves business-to-hacking attempts ratio in the logfiles.
Biting the hand that feeds IT
