News for hackers. Stuff that matters.

A comment on Site requests bank logins for online purchases. Parent comment

Re:Site requests bank logins for online purchases by paulmd on Thursday November 17, 2016 @12:00AM (#12974471)
This same procedure is used in the United States with startup darlings like Coinbase. No debit card or one-time-password required, please give your real bank account password.

https://support.coinbase.com/customer/en/portal/articles/194...

[ Parent | on HN ]
Re:Site requests bank logins for online purchases by gertef on Thursday November 17, 2016 @05:51PM (#12982501)
It's also used by all the major financial-management apps like Mint.com and Bank of America Portfolio Manager

https://www.mint.com/how-mint-works/security

[ Parent | on HN ]
Re:Site requests bank logins for online purchases by ColinDabritz on Thursday November 17, 2016 @07:34PM (#12983256)
I had heard good things about mint, and I liked the 'dashboard' screenshots and such. Then I looked at how it worked, particularly "provide your bank credentials" part.

It didn't take long to realize how incredibly dangerous that was, and leave.

Banks should provide API access for services like this because it mitigates significant security issues.

[ Parent | on HN ]
Re:Site requests bank logins for online purchases by ryan-c on Thursday November 17, 2016 @12:48AM (#12974707)
They at least make it optional.
[ Parent | on HN ]
Re:Site requests bank logins for online purchases by JustSomeNobody on Thursday November 17, 2016 @07:20AM (#12976772)
How does this, in any way, make it better that they do it at all?
[ Parent | on HN ]