News for hackers. Stuff that matters.

A comment on Want to piss off your IT department? Are the links not malicious looking enough?. Parent comment

Re:Want to piss off your IT department? Are the links not ma... by bradfa on Friday September 19, 2025 @07:21AM (#45300345)
Plaid and Finicity do this in the USA for some linking of banking to other financial products. Feels SO insecure. Connecting my credit union checking account through Plaid even ironically brought me to a login page which explicitly states I should never give my banking password to any other entity.

If I need to link my accounts and these services are the only choice then I change my banking passwords immediately after.

[ Parent | on HN ]
Re:Want to piss off your IT department? Are the links not ma... by chrisweekly on Friday September 19, 2025 @08:13AM (#45300749)
I thought Plaid used OAuth2. Hmm.
[ Parent | on HN ]
Re:Want to piss off your IT department? Are the links not ma... by cpburns2009 on Friday September 19, 2025 @08:49AM (#45301097)
Plaid asks for your raw bank credentials so that it can scrape up data. That's why I've always refused to use it.
[ Parent | on HN ]
Re:Want to piss off your IT department? Are the links not ma... by WOTERMEON on Friday September 19, 2025 @09:56AM (#45301728)
I really hope to never be in the position where I have to use it
[ Parent | on HN ]
Re:Want to piss off your IT department? Are the links not ma... by karel-3d on Friday September 19, 2025 @08:58AM (#45301181)
Plaid whole business model is that it uses OAuth2 on banks that support it and export the data through APIs; and for the banks that don't, they ask for name/password and scrape it through "fake" web browser that mimick user behavior on the backend.

(I worked for a Plaid competitor. The long-term goal for all similar companies is of course to use OAuth and APIs, because it breaks less often; but since the banks don't offer that, scraping it is!)

[ Parent | on HN ]
Re:Want to piss off your IT department? Are the links not ma... by _boffin_ on Friday September 19, 2025 @09:11AM (#45301309)
MX?
[ Parent | on HN ]