3 ms·

That's not what's happening at all. They are using a service called Plaid for bank authentication. It's used a lot of places. And you are doing ACH transfers; n

by DiNovi 9y ago

That's not what's happening at all. They are using a service called Plaid for bank authentication. It's used a lot of places. And you are doing ACH transfers; not bank wires. https://plaid.com/ https://plaid.com/

bubblethink 9y ago
What they do at the end is moot. Their domain, or a third party domain, asks you to enter bank credentials. The red flag is that you are not entering your credentials in your bank's website. Most other places ask you for your account and routing number, and do ACH micro deposits, after which you confirm the deposited amount. Gemini doesn't do that. The only way to avoid that on Gemini is go the wire route, which will incur a $20-$30 charge from your bank.
- DiNovi 9y ago
  it's a third party service that provides your routing numbers to gemini. they aren't storing your bank password anywhere.
  - bubblethink 9y ago
    Why should you need to trust a third party (payment company) of a third party (Gemini) with the plaintext password to my bank account ? Even if you trust them to not store the password long term, in the interim you are giving them access to your entire financial history. That's a pretty big privacy issue in itself.
    - DiNovi 9y ago
      Holy shit, it's not a plaintext password. sigh read about plaid. I linked to it.
      - bubblethink 9y ago
        web authentication is really not my area, but would you care to explain how this is safe ? For instance, I recognize when an app or a site is trying to use google to authenticate me, I am taken to google to authenticate. I'm not taken to the bank in this case. From https://blog.plaid.com/getting-started/ https://blog.plaid.com/getting-started/, it looks like a curl request with plaintext password request made to plaid's servers. Also from https://plaid.com/legal/longtail/ https://plaid.com/legal/longtail/, "You acknowledge that in accessing your data and information through the Service, your provider account access number(s), password(s), security question(s) and answer(s), account number(s), login information, and any other security or access information, and the actual data in your account(s) with such provider(s) such as bank and other account balances, credit card charges, debits and deposits (collectively, "Provider Account Data"), may be collected and stored in the Service."

by DiNovi 9y ago

bubblethink 9y ago

What they do at the end is moot. Their domain, or a third party domain, asks you to enter bank credentials. The red flag is that you are not entering your credentials in your bank's website. Most other places ask you for your account and routing number, and do ACH micro deposits, after which you confirm the deposited amount. Gemini doesn't do that. The only way to avoid that on Gemini is go the wire route, which will incur a $20-$30 charge from your bank.

DiNovi 9y ago
it's a third party service that provides your routing numbers to gemini. they aren't storing your bank password anywhere.
- bubblethink 9y ago
  Why should you need to trust a third party (payment company) of a third party (Gemini) with the plaintext password to my bank account ? Even if you trust them to not store the password long term, in the interim you are giving them access to your entire financial history. That's a pretty big privacy issue in itself.
  - DiNovi 9y ago
    Holy shit, it's not a plaintext password. sigh read about plaid. I linked to it.
    - bubblethink 9y ago
      web authentication is really not my area, but would you care to explain how this is safe ? For instance, I recognize when an app or a site is trying to use google to authenticate me, I am taken to google to authenticate. I'm not taken to the bank in this case. From https://blog.plaid.com/getting-started/ https://blog.plaid.com/getting-started/, it looks like a curl request with plaintext password request made to plaid's servers. Also from https://plaid.com/legal/longtail/ https://plaid.com/legal/longtail/, "You acknowledge that in accessing your data and information through the Service, your provider account access number(s), password(s), security question(s) and answer(s), account number(s), login information, and any other security or access information, and the actual data in your account(s) with such provider(s) such as bank and other account balances, credit card charges, debits and deposits (collectively, "Provider Account Data"), may be collected and stored in the Service."