3 ms·
It looks like it just takes an identifier and not your actual bank data. I’m not familiar with these identifiers, but I assume they’re somewhat generic per com
by catchmeifyoucan 6y ago
It looks like it just takes an identifier and not your actual bank data.
I’m not familiar with these identifiers, but I assume they’re somewhat generic per company maybe?
- bradknowles 6y agoEven if all it takes is the identifiers as shown in the example for Spotify, multiplied by all the hundreds or thousands of transactions per person, and all the thousands or millions of people, that’s still much too large of a honeypot. I don’t want anyone having that much information of that kind about me, unless they’re going to give me very strong guarantees about how hard they’re going to work to protect that data. And the name “catchmeifyoucan” definitely brings up vision of Frank Abagnale, and the kinds of crazy crimes that he managed to get away with for so long.....
- rco8786 6y agoI'm curious what would be the negative ramifications of someone gaining access to these identifiers? AFAIK they are not considered PII or anything. Not saying they should or should not be protected, but I'm having a difficult time thinking of what the attack vector would be. I guess having a list of your recurring SaaS services coupled with maybe a leaked password database or something could give potential attackers a list of the places to attempt using your password?
- catchmeifyoucan 6y agoI’m still not seeing it. It’s the equivalent of a logo api? From what I see, I don’t see you giving any personal data or identifiable information. Kinda like this api: https://clearbit.com/logo https://clearbit.com/logo And yup, I was inspired by the movie :)