3 ms·
API keys are stored on the computer (even accidentally pushed to github, etc) Credentials for web interfaces are stored in our heads. People are still able to
by jenscow 9y ago
API keys are stored on the computer (even accidentally pushed to github, etc)
Credentials for web interfaces are stored in our heads.
People are still able to use their own computers - via the web interface, which is under the full control of the banks.
- zAy0LfpBZLC8mAC 9y ago> API keys are stored on the computer (even accidentally pushed to github, etc) Then ... create an API without "API keys"?! > Credentials for web interfaces are stored in our heads. So ... store the credentials for the API in your head then?! > People are still able to use their own computers - via the web interface, which is under the full control of the banks. Erm ... no, it's not? The bank sends me IP packets, what happens with those IP packets is completely under my control (or under the control of anyone who happens to have compromised my computer, for that matter). I select what web browser I use. I could write my own web browser. Or modify an existing one. Or run it under a debugger. Or just not use a browser at all. What my computer does with the IP packets my bank sends me is completely out of the bank's control.