Having thought about it for a few days I've realized Blippy has a much more fundamental security hole. Banks consider this data to be private. In the past when

Having thought about it for a few days I've realized Blippy has a much more fundamental security hole. Banks consider this data to be private. In the past when I've forgotten my password and phoned my bank to get a new one, typically they ask for a shared secret (like mothers maiden name, first school, etc.) but if you say "I don't remember" they then ask you to verify your address and your recent transaction history. Blippy makes that last bit public and so probably creates a backdoor in the manual security protocols of a lot of banks.