Why does Apple allow Plaid apps in the App Store?
Why does Apple allow Plaid apps in the App Store?
4 by tehwebguy | 1 comments on Hacker News.
In my opinion Plaid is one of the worst things to ever happen to individual data & financial security. Beyond creating the single greatest target for attacks it goes against one of the most fundamental rules: never share username & password with anyone. Handing your password over to Plaid gives them every bit of data accessible from your bank's web account. They can get as much information in the time it takes to screen scrape your account as the credit bureaus have collected on you in years. Their TOS lets them get everything available as far back as your bank will let them go and does not contain any financial guarantee whatsoever for when they are inevitably hacked. But now apps are being approved that use Plaid without even confirming to the user that they are talking to Plaid because it's all being done in-app! No one can tell if they are sending their bank login (username, passsword, sometimes security questions / answers & one-time-passwords) to Plaid or a random third party because it happens outside of a browser. Why is Apple approving apps that use Plaid?
4 by tehwebguy | 1 comments on Hacker News.
In my opinion Plaid is one of the worst things to ever happen to individual data & financial security. Beyond creating the single greatest target for attacks it goes against one of the most fundamental rules: never share username & password with anyone. Handing your password over to Plaid gives them every bit of data accessible from your bank's web account. They can get as much information in the time it takes to screen scrape your account as the credit bureaus have collected on you in years. Their TOS lets them get everything available as far back as your bank will let them go and does not contain any financial guarantee whatsoever for when they are inevitably hacked. But now apps are being approved that use Plaid without even confirming to the user that they are talking to Plaid because it's all being done in-app! No one can tell if they are sending their bank login (username, passsword, sometimes security questions / answers & one-time-passwords) to Plaid or a random third party because it happens outside of a browser. Why is Apple approving apps that use Plaid?
Comments
Post a Comment