Hacker News Reader

I hope not, because its such a shitshow. You literally give your bank credentials to a third party who then logs in to your account and scrapes info off of it - info that you have no control over.

Capital One was smart enough to block them off (which is the bank I use), and now they actually provide proper OAuth based APIs to access your account.

View on HN

Things are changing with PSD2 regulations. Banks in the EU starting in 2019 will have to provide open (and secure) APIs to third parties.

One can only hope this would make it to the US as well. The problem largely seems to be banks being ancient behemoths in terms of technology, and introducing APIs like this poses a significant risk from security and policy perspective. Plus its not going to be a major source of revenue either, so why bother?

Reply on news.ycombinator.com