Canada calls screen scraping ‘unsecure,’ sets Open Banking target for 2023

Re:Canada calls screen scraping ‘unsecure,’ sets Open Bankin... by xwdv on Wednesday August 18, 2021 @10:20PM (#28229626)

Eh, it’s herd security. Hackers with credentials may pick off a few people’s accounts, but the odds of you being hit are low since it’s a hard problem to scale and there’s so many targets.

[ Parent | on HN ]

Re:Canada calls screen scraping ‘unsecure,’ sets Open Bankin... by vorpalhex on Wednesday August 18, 2021 @10:30PM (#28229678)

For the 0.3 seconds until they automate emptying accounts...

[ Parent | on HN ]

Re:Canada calls screen scraping ‘unsecure,’ sets Open Bankin... by Robin_Message on Thursday August 19, 2021 @05:20AM (#28231847)

If all Plaid's customers accounts were emptied in one go, I suspect banks would reverse those transactions and tell any counterparties that lost money to pound sand.

I believe the cool kids call it a "hard fork", as in, if you are the bank that received the stolen funds and let someone withdraw them, you get forked, hard.

[ Parent | on HN ]

Re:Canada calls screen scraping ‘unsecure,’ sets Open Bankin... by xwdv on Thursday August 19, 2021 @11:42AM (#28235263)

You wouldn’t drain all accounts all at once. Pick a couple accounts to satisfy your needs and drain them. Harder to get caught.

[ Parent | on HN ]