The Home Depot confirms payment systems breach

Re:The Home Depot confirms payment systems breach by berberous on Monday September 08, 2014 @10:09PM (#8288404)

Billguard uses Yodlee as a backend, so at the very least I do trust that Billguard only has read-only access. I'm less certain how Yodlee functions -- whether they just scrape data and have full access, or whether they get some sort of read-only token from the financial institution.

[ Parent | on HN ]

Re:The Home Depot confirms payment systems breach by memset on Tuesday September 09, 2014 @01:53AM (#8288931)

I am not familiar with Yodlee, but I recently discovered that many banks support OFX [1], which is a format for exchanging financial information.

GnuCash has a list of OFX credentials for major banks. [2] In fact, there are tons of OFX open source libraries out there - I had luck with this one recently in Python. [3]

[1] http://en.wikipedia.org/wiki/Open_Financial_Exchange

[2] http://wiki.gnucash.org/wiki/OFX_Direct_Connect_Bank_Setting...

[3] https://github.com/captin411/ofxclient

[ Parent | on HN ]

Re:The Home Depot confirms payment systems breach by marveller on Tuesday September 09, 2014 @08:49AM (#8289842)

Thanks for the references. After some research, I decided to go with YNAB http://www.youneedabudget.com/ it has a desktop and mobile apps and uses your dropbox for syncing data.

[ Parent | on HN ]

Re:The Home Depot confirms payment systems breach by raphael_o on Tuesday September 09, 2014 @02:52PM (#8291987)

BillGuard indeed has only access to data in a read-only fashion. Yodlee does have a mix of web scrappers as well as data feeds for certain financial institutions. They power different features for banks such as bill payment and others but companies like BillGuard don't have access to these APIs.

On its end, Yodlee is heavily regulated. Like a bank and sometimes even more: http://www.yodlee.com/yodlee-security/

[ Parent | on HN ]