News for hackers. Stuff that matters.

A comment on Klarna users are being signed in to random accounts. Parent comment

Re:Klarna users are being signed in to random accounts by danpalmer on Thursday May 27, 2021 @07:13AM (#27301564)
Can you explain more about the credentials and online banking?

I've used (and integrated with) Klarna in the UK and from what I've seen it's only really a payment method with merchants who you pay back by card later.

[ Parent | on HN ]
Re:Klarna users are being signed in to random accounts by tapland on Thursday May 27, 2021 @07:20AM (#27301617)
In Sweden most people have an electronic way to identify themselves to their bank (BankID) and it is used by many services to verify your identity.

It's extremely useful for any ID verification, but Klarna asks you to verify your identity towards them but when you open the app they have instead sent a request to identify with your bank, using your credentials.

[ Parent | on HN ]
Re:Klarna users are being signed in to random accounts by lxgr on Thursday May 27, 2021 @08:25AM (#27302156)
Klarna provides many different financial services.

They provide "pay by bank account" (which involves the mentioned MITMing of users' online banking accounts, unless Klarna is integrated with your bank via OAuth/PSD2, which is still not ubiquitous), but also installment payments/factoring and others.

[ Parent | on HN ]