4 ms·
The attack surface is larger if there are also third parties with access to your account data. Attackers will breach the weakest link. Right now there is only
by danuker 5y ago
The attack surface is larger if there are also third parties with access to your account data.
Attackers will breach the weakest link. Right now there is only one link: your bank's website.
- lazide 5y agoThat is unfortunately not true. There are a great many additional surface areas, such as that time they linked TurboTax to their account, or the time they signed up for budgeting software - and gave it their bank credentials, etc. Most of these being done through screen scraping and by storing users bank credentials in some random 3rd parties database. Which is a huge and tempting target. It’s gotten somewhat better in some cases now as they are at least using SSO type setups, so it’s a track able and expirable token instead of raw credentials at least some of the time - but yikes.