News for hackers. Stuff that matters.

A comment on List of Sites Affected by Cloudflare's HTTPS Traffic Leak. Parent comment

Re:List of Sites Affected by Cloudflare's HTTPS Traffic Leak by doubleunplussed on Friday February 24, 2017 @11:00AM (#13724784)
OP isn't saying they used the same password for transferwise as for their bank. Transferwise allows you to log into your internet banking and authorize a transaction through their site. You actually give them your internet banking password, regardless of how you log into their site.

Which is pretty strange in itself, to trust a 3rd party with your internet banking password, but that's how it works.

[ Parent | on HN ]
Re:List of Sites Affected by Cloudflare's HTTPS Traffic Leak by philsnow on Friday February 24, 2017 @11:28AM (#13725047)
This is the main reason I've never used Mint.
[ Parent | on HN ]
Re:List of Sites Affected by Cloudflare's HTTPS Traffic Leak by snowwrestler on Friday February 24, 2017 @09:29PM (#13729646)
Folks should review their banks' policies before doing this.

For example Bank of America won't hold customers liable for fraudulent transfers or bill pay transactions through their website, but sharing your online ID and password seems to void that protection.

https://www.bankofamerica.com/onlinebanking/online-banking-s...

[ Parent | on HN ]