News for hackers. Stuff that matters.
Re:Site requests bank logins for online purchases by maerF0x0 on Wednesday November 16, 2016 @08:10PM (#12973275)
Pretty sure Expensify and Mint did/do this, no?
Re:Site requests bank logins for online purchases by kjbflsudfb on Wednesday November 16, 2016 @08:15PM (#12973305)
Yea, but those are different services that utilize the history of your transactions. What reason does an online retailer have to access that level of detail? Shouldn't they simply be able to accept the information on the credit card for the sale?
Re:Site requests bank logins for online purchases by jpalomaki on Wednesday November 16, 2016 @08:24PM (#12973352)
They can reduce their risk by doing this. For online retailer there is always risks in accepting card payments. (Not saying this is a good idea, just trying to find reasons).
Re:Site requests bank logins for online purchases by kjbflsudfb on Wednesday November 16, 2016 @08:25PM (#12973359)
Whose risk is reduced? The retailer or the bank? Certainly not the cardholder.
Re:Site requests bank logins for online purchases by 464192002d7fe1c on Wednesday November 16, 2016 @08:42PM (#12973464)
The retailer and only the retailer.

It probably reduces fraud chargebacks to nearly 0.

Re:Site requests bank logins for online purchases by fishtoaster on Wednesday November 16, 2016 @08:15PM (#12973303)
True, but they have a legitimate need to access your banking info: they need access to your transaction history to function. The absurdity here is asking for bank login info just to make a purchase.
Re:Site requests bank logins for online purchases by adambrenecki on Wednesday November 16, 2016 @08:30PM (#12973398)
Sites like Mint do this to retrieve your banking history. Asking for banking login details seems to be the standard way of doing that sort of thing. (Don't get me wrong, it's still terrible, but it's not like the banks provide an API you can log in to with oAuth or something.)

This is different; mwave is a retailer, all they're doing is receiving a payment.

Re:Site requests bank logins for online purchases by cyberferret on Wednesday November 16, 2016 @09:03PM (#12973577)
I don't think there is reason to any longer. Most banks now have a trust relationship with feed providers like Yodlee etc. We use Xero, and I believe they use Yodlee to pull bank and credit card transactions in. IIRC we had to authorise the transfer with Yodlee, and not with Xero directly (i.e. Xero doesn't get to see or capture our bank login details).