4 ms·

I'm pretty sure LinkedIn does or used to do the same.

gpvos 8y ago
Still does. The apparently popular German payment system Sofortüberweisung (now run by Klarna) even requests the password of your bank account.
- durnygbur 8y ago
  SOFORT quite explicitly ~scraps~ scrapes the entire available transaction history for „your convenience” (much more is available with access login and password actually). What a satisfaction when they tried to enter Polish market and the Polish finance controlling authorities shut them down before they managed to squeek. The famous German „privacy” it is.
  - netsharc 8y ago
    They claim it's to see that the customer is liquid enough, so more for the convenience of the seller. It's incredible that the banks tolerated this service even though they told their customers to not to give their credentials to a 3rd party. Or not just banks, how about the German Federal Office for Information Security. I wish the bank would just block accounts who they detect used the service with an error like "We think your credentials have been compromised" (then again the stupid customer will think it's the bank who got breached). Or give them a fine of e.g. 100 Euro for breaching their user agreement. Then again, this would lose them so many pissed-off customers.
  - lsaferite 8y ago
    The idea of handing over my banking password to any third party is crazy. Mind you, I'd love an API that I could use to easily pull all of my banking details into my local system. There are a few ways to do this currently, but nothing simple, open, and standard. P.S. As you seem to be a non-native English speaker, the word you wanted to use was "scrapes" not "scraps".
    - durnygbur 8y ago
      > I'd love an API that I could use to easily pull all of my banking details into my local system. This is almost non-existend for personal banking. First and only case by now I’ve encountered was in Czechia: https://www.fio.cz/bank-services/internetbanking-api https://www.fio.cz/bank-services/internetbanking-api
durnygbur 8y ago
yes LinkedIn was certainly using dark UI patterns to upload the contact list and send invites to everyone on it.
azimuth11 8y ago
There was a class action lawsuit against them (LinkedIn Lost it, iirc) for what they did. I believe they would try to connect you with any of your email contacts if you logged in with OAuth.
OrgNet 8y ago
LinkedIn was pretty bad, but Facebook was saying that your login information was only going to get used to verify your email. smt88 has a good analogy up there

Still does. The apparently popular German payment system Sofortüberweisung (now run by Klarna) even requests the password of your bank account.

durnygbur 8y ago
SOFORT quite explicitly ~scraps~ scrapes the entire available transaction history for „your convenience” (much more is available with access login and password actually). What a satisfaction when they tried to enter Polish market and the Polish finance controlling authorities shut them down before they managed to squeek. The famous German „privacy” it is.
- netsharc 8y ago
  They claim it's to see that the customer is liquid enough, so more for the convenience of the seller. It's incredible that the banks tolerated this service even though they told their customers to not to give their credentials to a 3rd party. Or not just banks, how about the German Federal Office for Information Security. I wish the bank would just block accounts who they detect used the service with an error like "We think your credentials have been compromised" (then again the stupid customer will think it's the bank who got breached). Or give them a fine of e.g. 100 Euro for breaching their user agreement. Then again, this would lose them so many pissed-off customers.
- lsaferite 8y ago
  The idea of handing over my banking password to any third party is crazy. Mind you, I'd love an API that I could use to easily pull all of my banking details into my local system. There are a few ways to do this currently, but nothing simple, open, and standard. P.S. As you seem to be a non-native English speaker, the word you wanted to use was "scrapes" not "scraps".
  - durnygbur 8y ago
    > I'd love an API that I could use to easily pull all of my banking details into my local system. This is almost non-existend for personal banking. First and only case by now I’ve encountered was in Czechia: https://www.fio.cz/bank-services/internetbanking-api https://www.fio.cz/bank-services/internetbanking-api

durnygbur 8y ago

yes LinkedIn was certainly using dark UI patterns to upload the contact list and send invites to everyone on it.

azimuth11 8y ago

There was a class action lawsuit against them (LinkedIn Lost it, iirc) for what they did. I believe they would try to connect you with any of your email contacts if you logged in with OAuth.

OrgNet 8y ago

LinkedIn was pretty bad, but Facebook was saying that your login information was only going to get used to verify your email. smt88 has a good analogy up there