Plaid Deletes GitHub Issue Exposing Imitation of Bank Login UIs

Re:Plaid Deletes GitHub Issue Exposing Imitation of Bank Log... by temp129038 on Saturday June 08, 2019 @01:50PM (#20133882)

Plaid needs to be exposed as one of the most unethical companies in SV. If people are worried about online privacy then they should really be worried about a company that is so deceiving and makes it basically impossible to revoke permissions on something as sensitive as access to your bank account and transaction history once granted.

[ Parent | on HN ]

Re:Plaid Deletes GitHub Issue Exposing Imitation of Bank Log... by okigan on Saturday June 08, 2019 @02:22PM (#20134103)

Looks like Betterment & Wealthfront use plaid, which could affect many on HN [1][2].

[1] https://www.quora.com/Why-doesnt-Betterment-or-Wealthfront-u...

[2] https://www.investmentnews.com/article/20190108/FREE/1901099...

[ Parent | on HN ]

Re:Plaid Deletes GitHub Issue Exposing Imitation of Bank Log... by jgalt212 on Saturday June 08, 2019 @02:58PM (#20134323)

probably so, but the if you look at all the large recent successes in SV, all of them have had serious moral and legal lapses. As they are well funded, and have powerful friends, they have thus far avoided jail time.

So my cynical view, is that Plaid is just playing a game of doing what works and has proven to work. I am not excusing their bad behavior, just trying to point out what's motivating it. Robbers will always rob, and cheaters will always cheat, but we as a society need to make it less profitable to rob and cheat--and not just for the lower classes, for the elites as well.

Rahm Emanuel wrote on this recently in The Atlantic, and then shortly thereafter took a well paid job in financial services. So I guess, more do as I say not do as I do.

https://www.theatlantic.com/ideas/archive/2019/05/middle-cla...

[ Parent | on HN ]

Re:Plaid Deletes GitHub Issue Exposing Imitation of Bank Log... by adrr on Saturday June 08, 2019 @03:04PM (#20134369)

To revoke access change your bank password. My biggest concern with any of the bank api providers is who they use to scrape the banks. Most are offshore outside the reach of US law enforcement or court system.

[ Parent | on HN ]

Re:Plaid Deletes GitHub Issue Exposing Imitation of Bank Log... by robot on Saturday June 08, 2019 @01:56PM (#20133926)

can you revoke by changing your password?

[ Parent | on HN ]

Re:Plaid Deletes GitHub Issue Exposing Imitation of Bank Log... by temp129038 on Saturday June 08, 2019 @02:12PM (#20134035)

I’m not sure, but does it matter?

I take issue with a product that markets to consumers as an easy way to authenticate for the purpose of pulling or pushing funds, but is actually authorizing developers to scrape years of transaction history in 20 minutes, my real time balance, my phone/email/address etc. without another level of permission. It’s disgusting.

I just wanted an alternative to microdeposits to prove to an app that I own a bank account, not give the app free range to steal all my bank data in the process of doing so.

[ Parent | on HN ]

Re:Plaid Deletes GitHub Issue Exposing Imitation of Bank Log... by Nursie on Saturday June 08, 2019 @02:33PM (#20134168)

In Europe we have PSD2 and similar things which are working towards much more of an oauth type of situation.

[ Parent | on HN ]

Re:Plaid Deletes GitHub Issue Exposing Imitation of Bank Log... by pbreit on Saturday June 08, 2019 @02:54PM (#20134298)

In Europe there are industry consortiums working specifically on the account access topic: https://www.openbankingeurope.eu/

[ Parent | on HN ]