3 ms·
There are some genealogical services out there that do Leeds-Collins charts that to my knowledge work by asking their users for their 23andMe credentials, much
by riffic 3y ago
There are some genealogical services out there that do Leeds-Collins charts that to my knowledge work by asking their users for their 23andMe credentials, much like some third party banking services that work by asking their users directly for their banking credentials. There's a lot of really bad security in this sector.
- beaugunderson 3y agoso sad given that there was a 23andMe OAuth2 API for some time that had SNPs as OAuth scopes!
- riffic 3y agogonna name and shame geneticaffairs.com here for this appalling practice: https://geneticaffairs.com/faq.html https://geneticaffairs.com/faq.html > Genetic Affairs is able to retrieve DNA matches for several DNA matching companies. To download DNA matches of these companies we need to store your login credentials. See the next section concerning the secure storage of these credentials. > Since we have to use login information for 23andme and FamilyTreeDNA, we use an isolated database in which we encrypt and store the passwords of these websites. This database is only available in a private network in the cloud and not exposed to the Internet.
- beaugunderson 3y agobizarre... I wonder why they don't just accept a raw data upload from 23andMe?