Plaid | search
Click here to view Plaid news from 60+ newspapers.
Bookmark or Share- authentication - Can someone steal money from my bank account if they ...@TimX: yes, but. 1. Even with authorization the payment can be canceled by the account owner without giving any reason within 2 months of the payment, no questions asked (you sign with your bank that it is your duty to check your account statement and that it is considered approved if you do not reject it within so many weeks after they provide it).
- social engineering - The audacity of accountchek.com - Information ...The information provided by the lender includes the borrower’s name, e-mail address, telephone number, the last four digits of his/her Social Security Number (for identity authentication), the name of the borrower’s employer (s), the amount of the borrower’s net paycheck, the amount of required reserve funds, the loan number, and the ...
- authentication - Is Plaid, a service which collects user’s banking ...On Plaid’s website Citi, American Express, and others are listed as investors. It appears that banks aren’t against this bad practice, and are, in some cases, actually encouraging it. This makes me think that I might be missing something. Maybe Plaid has some special access to banking systems and it isn’t as bad as it seems.
- Is Plaid safe if I change the password after deposit?Plaid technically yes, but they are safe. What's not safe (Imho) that there is a possibility that someone will hack into Plaid in the future. For the sake of this question I assume, that Plaid itself is safe (even so, they will have my password only for 5min).
- How to Securely Implement a "Remember Me" Feature?There are two parts to my answer: First, assuming your threat model does not worry about exposure of client side cookies, you can generate and store a nonce on the server side, hash that with the username and other info (e.g. client ip, computername, timestamp, similar stuff), and send that in the cookie.
More
