3 ms·

Phishing generally means "pretend to be X to get user's info/credentials for X", do you have a different definition?

junon 4y ago
Phishing is typically tricking an individual into divulging sensitive information. Credential stealing is typical, but still a subset. Plaid uses banking credentials on a user's behalf. Yes, it's similar to using stolen credentials because... it's the same thing, except consent, audits, insurance, etc. all play a role whereas with criminal activity they do not.
- cmeacham98 4y ago
  This seems to be some weird semantic angle where because Plaid is audited that makes what they're doing not phishing? I'm not sure I agree with that definition or that it is particularly common. That said, if it makes you feel better, pretend my comment read "Plaid pretends to be the users' banks in order to trick users into giving Plaid their bank credentials and stores those credentials without their knowledge or consent".
  - junon 4y ago
    That is the definition of phishing. This is why "vishing" is "voice phishing", etc. Phishing is stealing information. It's not a "semantic angle" - it's the definition of phishing. You're free to consulting a dictionary to fact check me. Plaid is not phishing, by any true definition of the word.
    - cmeacham98 4y ago
      Like I said, pretend I said "Plaid pretends to be the users' banks in order to trick users into giving Plaid their bank credentials and stores those credentials without their knowledge or consent" if it makes you feel any better. I'm content with my comment if you agree Plaid's behavior matches phishing with the only exception being how they use the credentials afterwards.
      - fragmede 4y ago
        But it's how they use the credentials afterwards that's core to the disagreement over your use of the word phishing. Which is to say, you don't like or trust them, fine, but Plaid isn't a scam that's going to try and steal your money with those credentials it's gotten. Which makes it not phishing. Phishing involves an attacker trying to get those credentials in order to steal yo shit. Plaid is trying to perform a service on your behalf. If I go to a store and pick up some items and leave with them is that stealing? How about if I pay for them?
        cmeacham98 4y ago
        Like I said, pretend I said "Plaid pretends to be the users' banks in order to trick users into giving Plaid their bank credentials and stores those credentials without their knowledge or consent" if it makes you feel any better.
        junon 4y ago
        Plaid does none of that. They don't trick you. Having used plaid software before, it's pretty clear what's happening.
        cmeacham98 4y ago
        I've (been conned into) using Plaid too! Here's the login screen I saw: https://d1hzvs60s6jsjg.cloudfront.net/IMAGES-1/208624076/plaid3.png https://d1hzvs60s6jsjg.cloudfront.net/IMAGES-1/208624076/pla... Please describe to me how I can figure out from this that my bank credentials will be sent to and stored by a third party that isn't my bank.
        junon 4y ago
        I'm not clicking on your janky link, sorry.
        4y ago

Phishing is typically tricking an individual into divulging sensitive information. Credential stealing is typical, but still a subset. Plaid uses banking credentials on a user's behalf. Yes, it's similar to using stolen credentials because... it's the same thing, except consent, audits, insurance, etc. all play a role whereas with criminal activity they do not.

cmeacham98 4y ago
This seems to be some weird semantic angle where because Plaid is audited that makes what they're doing not phishing? I'm not sure I agree with that definition or that it is particularly common. That said, if it makes you feel better, pretend my comment read "Plaid pretends to be the users' banks in order to trick users into giving Plaid their bank credentials and stores those credentials without their knowledge or consent".
- junon 4y ago
  That is the definition of phishing. This is why "vishing" is "voice phishing", etc. Phishing is stealing information. It's not a "semantic angle" - it's the definition of phishing. You're free to consulting a dictionary to fact check me. Plaid is not phishing, by any true definition of the word.
  - cmeacham98 4y ago
    Like I said, pretend I said "Plaid pretends to be the users' banks in order to trick users into giving Plaid their bank credentials and stores those credentials without their knowledge or consent" if it makes you feel any better. I'm content with my comment if you agree Plaid's behavior matches phishing with the only exception being how they use the credentials afterwards.
    - fragmede 4y ago
      But it's how they use the credentials afterwards that's core to the disagreement over your use of the word phishing. Which is to say, you don't like or trust them, fine, but Plaid isn't a scam that's going to try and steal your money with those credentials it's gotten. Which makes it not phishing. Phishing involves an attacker trying to get those credentials in order to steal yo shit. Plaid is trying to perform a service on your behalf. If I go to a store and pick up some items and leave with them is that stealing? How about if I pay for them?
      - cmeacham98 4y ago
        Like I said, pretend I said "Plaid pretends to be the users' banks in order to trick users into giving Plaid their bank credentials and stores those credentials without their knowledge or consent" if it makes you feel any better.
        junon 4y ago
        Plaid does none of that. They don't trick you. Having used plaid software before, it's pretty clear what's happening.
        cmeacham98 4y ago
        I've (been conned into) using Plaid too! Here's the login screen I saw: https://d1hzvs60s6jsjg.cloudfront.net/IMAGES-1/208624076/plaid3.png https://d1hzvs60s6jsjg.cloudfront.net/IMAGES-1/208624076/pla... Please describe to me how I can figure out from this that my bank credentials will be sent to and stored by a third party that isn't my bank.
        junon 4y ago
        I'm not clicking on your janky link, sorry.
        4y ago