2 ms·
I got halfway through the "Privacy.com" sign up process and discovered they wanted my online banking username and password to access funds, with some ridiculous
by xkcd-sucks 4y ago
I got halfway through the "Privacy.com" sign up process and discovered they wanted my online banking username and password to access funds, with some ridiculous alternative like mailing a paper check
- blamazon 4y agoYeah... that's FinTech. I find it soothing to consider how little I trust my bank with those credentials when I'm handing them over.
- xkcd-sucks 4y agoAt the very least one would expect the bank to be salting and hashing - PrivacyDotCom presumably has to keep the plaintext in some form in order to use them! As a secondary concern, the bank has occasional 2fa, and definitely does some kind of anomaly detection. Primed by the ickiness of the user/pass request I just had a mental image of some hacky Selenium script on an AWS IP address filling out the login form and getting my online banking disabled proactively.
- jiveturkey 4y agoprivacy.com is just like VPNs. It's not private; you're "just" moving the pieces. That's not to say that these things aren't useful, but caveat emptor.