News for hackers. Stuff that matters.
Re:The Secret API of Banks by ikeboy on Thursday August 09, 2018 @01:37AM (#17721831)
My belief is that organizations that can be gamed as easily as you describe have less than 1 fulltime person dedicated to preventing scraping. Or equivalently, 1 fulltime person should be sufficient to make it difficult to scrape at scale.

What do you think of the canary account I suggested?

Re:The Secret API of Banks by KirinDave on Thursday August 09, 2018 @01:51AM (#17721882)
> What do you think of the canary account I suggested?

I don't know how such a canary account would ever end up as a target for financial aggregation. It'd probably be a lawsuit from the aggregator for TOS violation if it was a sting operation.

Re:The Secret API of Banks by ikeboy on Thursday August 09, 2018 @01:58AM (#17721905)
You'd submit it manually.

>lawsuit

You really think an aggregator who's blatantly violating bank TOS is going to sue?

Re:The Secret API of Banks by KirinDave on Thursday August 09, 2018 @01:59AM (#17721908)
Yes! There's only upside.
Re:The Secret API of Banks by ikeboy on Thursday August 09, 2018 @02:20AM (#17721990)
Well you then become worth it for the bank to counter-sue and get discovery on exactly how you broke their ToS.