News for hackers. Stuff that matters.
Re:Stripe Financial Connections by iknowstuff on Wednesday May 04, 2022 @02:18PM (#31263986)
Which banks have OAuth APIs? I would love to switch to one of those instead of exposing my password due to my bank's incompetence.
Re:Stripe Financial Connections by conroy on Wednesday May 04, 2022 @02:48PM (#31264338)
WellsFargo has some form of OAuth (https://developer.wellsfargo.com/). I know that YNAB (https://www.youneedabudget.com/) uses it.
Re:Stripe Financial Connections by withinboredom on Wednesday May 04, 2022 @05:32PM (#31266116)
I use Bunq here in the NL. I wish all banks would steal their APIs. The abilities I have as a dev are simply amazing.

https://doc.bunq.com/

Re:Stripe Financial Connections by Tijdreiziger on Wednesday May 04, 2022 @05:40PM (#31266197)
Bunq seems like a… suboptimal bank, though. They cost ~5x more than other NL banks, and by all accounts, their customer support is streets behind.

Their API and app-centric approach seem to be the only upshots, and even then, other banks have relatively good apps these days.

Re:Stripe Financial Connections by cliftonc on Thursday May 05, 2022 @01:25AM (#31269850)
I am a very happy Bunq customer for 4+ years, and as a user of other Dutch banks (for a mortgage - ABN amro, in the past UK banks like FD), their overall service levels great - if I chat via the app I have always been helped quickly, flexibility with accounts, cards, automation via the APIs etc is absolutely worth the price hike. These are things I am happy to pay a few extra cups of coffee a month for as they make my life with an extended family much easier to manage day to day.
Re:Stripe Financial Connections by rapnie on Thursday May 05, 2022 @02:29AM (#31270236)
Good service levels will be a real USP, I expect. In the Netherlands where physical banks are a dying breed (especially those that deal with money. Aforementioned ABN Amro doesn't let you change a 100 Euro bill into 2 fifty bills, for instance). Especially the elderly are lost in the digital world and need guidance. For my parents for instance, every website is like a completely different app they need to learn how to use and with layouts changing all the time this is an enormous struggle to them.

I hate the fact that physical banks (and cash) are disappearing. I don't have complicated needs as to the digital services I consume, same as many other people. Then online banks become indistinguishable from the next, and it is ability to contact real people that sets them apart.

Re:Stripe Financial Connections by Tijdreiziger on Friday May 06, 2022 @02:22AM (#31281906)
The cost-cutting wrt physical bank branches is just ridiculous. You can't even deposit or withdraw coinage at ABN AMRO branches anymore; they outsourced that to home improvement stores instead (yes, really).
Re:Stripe Financial Connections by rapnie on Friday May 06, 2022 @03:18AM (#31282302)
Yes, I experienced that too. Acted surprised and look at me exasperated and what seemed with slight disgust when I came with actual cash to their office. "We don't deal with money, sir".

The situation with cash is overall very bad. Try to pay with a 100 Euro note in smaller cities. Almost no one will accept it, including banks. I regularly see very frustated tourists who with cash in hand are left out in the cold.

Re:Stripe Financial Connections by astrange on Wednesday May 04, 2022 @08:05PM (#31267582)
Capital One does, but for some reason the connection process breaks if I have an ad blocker enabled even if I whitelist their domain.

Chase does at least for credit cards.

Betterment has app passwords, which is better than using your full password.

Re:Stripe Financial Connections by websap on Wednesday May 04, 2022 @08:27PM (#31267780)
Really happy Betterment implemented this. Hoping they’ll soon have some actions based Auth as well.
Re:Stripe Financial Connections by astrange on Wednesday May 04, 2022 @11:21PM (#31269015)
Unfortunately I did something wrong with a Betterment connection last week that caused them to lock my account for hacking attempts, until I call them, and their EST support hours are only in times I'm in meetings in PST so far…

but at least I don't use their checking feature, which they're oddly excited about despite it having no advantage over other banks and no possible way it ever could have an advantage.

Re:Stripe Financial Connections by confounded on Thursday May 05, 2022 @01:21AM (#31269818)
I got blocked as fraudulent and banned before I could even transfer my savings in to Betterment. (No problems with Wealthfront, and now a happyish customer).
Re:Stripe Financial Connections by FintechRisen on Friday May 06, 2022 @05:40PM (#31289865)
Different aggregators will have different connections established based on relationships and also the priority of the bank. I've seen a ton of different options based on the fintechs apps I use from Plaid, MX, Finicity, etc. Long story short, it's usually the big banks. Different aggregators have different priorities around the amount of traffic they send over these connections though. Candidly I don't know why that is, but I have some hypotheses. Ultimately though you can assume all of the above names will have accounts like Chase, Wells, Citi, Cap One, BOA, US Bank etc.
Re:Stripe Financial Connections by FintechRisen on Wednesday May 04, 2022 @02:53PM (#31264391)
MX and Finicity both have OAuths to like 80+% of the top 20 financial institutions. There's a reason Plaid doesn't want people switching to them and it's hella sus
Re:Stripe Financial Connections by conradev on Wednesday May 04, 2022 @04:24PM (#31265369)
I believe Plaid was the one who got JPMorgan to build an OAuth API in the first place: https://finovate.com/plaid-signs-open-banking-agreement-with...

Why can’t the reason be “losing their only source of revenue to a competitor”? That seems like a fine reason to not want people to switch

Re:Stripe Financial Connections by amonroe369 on Wednesday May 04, 2022 @04:41PM (#31265585)
Edit: cannot assure, but rumor on the street from peers, they were not the ones to get Chase to build OAuth.

PR is a hell of a marketing tactic.

Re:Stripe Financial Connections by judge2020 on Wednesday May 04, 2022 @03:48PM (#31264932)
Plaid used oauth for Bank of America circa 2019 when I tried, and currently uses Capital One's oauth when I try to log into it. I'm sure they use it when it's convenience (or maybe when the financial institution mandates it).
Re:Stripe Financial Connections by thekyle on Wednesday May 04, 2022 @02:22PM (#31264038)
I know that Charles Schwab has some sort of OAuth flow which I used when connecting my account to TurboTax this year.
Re:Stripe Financial Connections by lbotos on Wednesday May 04, 2022 @02:40PM (#31264237)
So, I got very excited about this, but it seems that banks are expecting "bank integrator" aka companies, and not giving access to end users :( If any knows of a bank that has API access in the US do share!
Re:Stripe Financial Connections by vineyardmike on Wednesday May 04, 2022 @05:01PM (#31265811)
You might find luck using companies targeting algo trading. A lot of companies allow use of the account more like a checking account (eg interactive brokers). They have an API and also allow different logins to have different authorizations.
Re:Stripe Financial Connections by jjeaff on Thursday May 05, 2022 @01:53AM (#31270011)
Mercury Bank has nice, friendly APIs. I believe they only do business bank accounts, though.

But I think I remember seeing that some of Capital One's bank account offerings have some customer facing apis.

Re:Stripe Financial Connections by jackson1442 on Wednesday May 04, 2022 @02:37PM (#31264209)
chase has an OAuth flow but not every integration uses it.
Re:Stripe Financial Connections by CincinnatiMan on Wednesday May 04, 2022 @04:46PM (#31265643)
Capital One
Re:Stripe Financial Connections by fjni on Wednesday May 04, 2022 @06:53PM (#31266917)
they deserve a lot of credit for how early they built this and made it relatively broadly available!