News for hackers. Stuff that matters.

A comment on Tell HN: Do not store any funds in PayPal or use them for anything critical. Parent comment

Re:Tell HN: Do not store any funds in PayPal or use them for... by xkcd-sucks on Thursday February 23, 2023 @04:12PM (#34916529)
I got halfway through the "Privacy.com" sign up process and discovered they wanted my online banking username and password to access funds, with some ridiculous alternative like mailing a paper check
[ Parent | on HN ]
Re:Tell HN: Do not store any funds in PayPal or use them for... by blamazon on Thursday February 23, 2023 @07:49PM (#34919118)
Yeah... that's FinTech. I find it soothing to consider how little I trust my bank with those credentials.
[ Parent | on HN ]
Re:Tell HN: Do not store any funds in PayPal or use them for... by xkcd-sucks on Friday February 24, 2023 @05:49PM (#34931287)
At the very least one would expect the bank to be salting and hashing - PrivacyDotCom presumably has to keep the plaintext in some form in order to use them!

As a secondary concern, the bank has occasional 2fa, and definitely does some kind of anomaly detection. Primed by the ickiness of the user/pass request I just had a mental image of some hacky Selenium script on an AWS IP address filling out the login form and getting my online banking disabled proactively.

[ Parent | on HN ]
Re:Tell HN: Do not store any funds in PayPal or use them for... by jiveturkey on Thursday February 23, 2023 @11:36PM (#34920822)
privacy.com is just like VPNs. It's not private; you're "just" moving the pieces. That's not to say that these things aren't useful, but caveat emptor.
[ Parent | on HN ]