Hacker News Reader

If my bank had a properly secure API to download the electronic statement .pdf's they generate I'd use that.

It would beat the trouble of having to manually click to download each one, and then being presented with a suggested filename of "session.cgi" to save the thing into (i.e., they are not even smart enough to set the mime headers to give a proper filename to the file).

View on HN

This is really easy to automate, even without an API. And by "easy" I mean it should take around 30 minutes -- although you could take arbitrarily longer by adding a pretty web UI or reporting or whatever.

The problem comes in when you try to do things like "solve this for the thousand most common banks, while not making users enter their credentials every time, with adequate coordination with each bank to avoid being blocked for logging into numerous accounts, with adequate security to avoid mass-leaking online banking credentials."

Reply on news.ycombinator.com