lxgr

21 ms·

481.
by lxgr 5mo ago
> They can do anything you can do when logged in to the bank's website Which is hopefully nothing beyond looking at transaction data without 2FA.
482.
by lxgr 5mo ago
Yes, in the same sense as Dropbox offers essentially no functionality on top of a rsync script.
483.
by lxgr 5mo ago
It might not look like it at a first glance, but between this and the "everyday work mode" preference on Codex for macOS, it seems to me that these are OpenAI's incremental steps towards an Openclaw-like product offering.
484.
by lxgr 5mo ago
> debit cards are the worse as they (technically) don’t allow you to dispute charges like in a credit card. That's a commonly propagated falsehood. Both legally (Regulation E) and practically (all large card networks require issuers
485.
by lxgr 5mo ago
What good is freezing a card (regardless of debit or credit) after something has already gone wrong?
486.
by lxgr 5mo ago
In Germany, there was a similar antitrust-based ruling, but it even went further: They disallowed banks to block screen scraping services , as they considered the existence of screen-scraping-based confirmed instant bank transfers a valuab
487.
by lxgr 5mo ago
At this point, it's often OAuth, but in my view, the exact means of access is a red herring: The only thing that changes between screen scraping and OAuth is that Plaid doesn't get my banking password, which is literally the least
488.
by lxgr 5mo ago
If it doesn't look like a real account, you usually won't get whatever you're signing up for.
489.
by lxgr 5mo ago
Airbnb requested Plaid access to my entire Chase account and all transactional data to "verify my credit card" a few years ago, and wouldn't budge until I tried Apple Pay, where they apparently weren't able to figure out
490.
by lxgr 5mo ago
Honestly, given that your bank most likely is processing your data using AI/LLMs anyway (after all, credit scores were one of the first applications of "big data" and "machine intelligence", back when that was mostl
491.
by lxgr 5mo ago
But what comes after? Can users decline or at least downgrade the level of access requested by whoever wants to peek into their bank account? Do banks clearly indicate (and periodically remind the user about!) all parties currently having a
492.
by lxgr 5mo ago
I’d be willing to bet that ChatGPT will know the average user’s political affiliation and vices about three messages in. The difference is that banking records are harder to falsify, so there’s that.
493.
by lxgr 5mo ago
It’s roughly the difference between giving somebody your phone number and letting them eavesdrop on every single call.
494.
by lxgr 5mo ago
It’s worse than keys, it’s a persistent read-only view of all account data. At least there is a process for unauthorized ACH debits. For this blatant breach of privacy, there is nothing.
495.
by lxgr 5mo ago
They do because their banks are largely not offering anything more fine grained, because they don’t have to, and in fact doing so would cannibalize their debit card business. Requesting full account access for anything other than maybe budg
496.
by lxgr 5mo ago
Why'd you want your expenses be billed in a foreign currency if you can help it? Converting once, at the time you pick a provider, is trivial compared to having to continuously think about it as you're paying them.
497.
by lxgr 5mo ago
And create yet another completely non-descriptive package name?
498.
by lxgr 5mo ago
Doesn’t even need to be every location. Some services are only accessible from a single country, and Mullvad has at most a handful of locations per country. All things considered, there are just an incredibly small number of IPs shared amon
499.
by lxgr 5mo ago
> The advantages for the user are, if they find a server that works for accessing some service they can connect to that server again and it will work again because they get the same IP. On the flip side, if they’re getting banned by a se
500.
by lxgr 5mo ago
UDP and nothing layered on top? Then you'll be reimplementing host discovery (i.e. how do clients find the host that has context on their request), retransmissions, flow control, congestion control, and many other things on top of it,
501.
by lxgr 5mo ago
Markdown syntax highlighting is nice, but at this point I’d be very happy if software could just consistently open .md files as plain text. I have my Obsidian vault synced to Google Drive, and it’s completely impossible to just look at the
502.
by lxgr 5mo ago
Check your facts, please: Germans figuratively shoot themselves in the knee, not the foot ;)
503.
by lxgr 6mo ago
Palm OS (5, I think?) had a few unhinged ones as well. I sometimes miss the time when UIs didn’t take themselves too seriously.
504.
by lxgr 6mo ago
Wow, they’re collecting a bunch of PII instead of using the zero-knowledge proof of humanity thing that the EU ID wallet is supposed to support? How uneuropean.
505.
by lxgr 6mo ago
Sure, but it’ll feel nothing like the actual PSP. It will be missing the haptics, the original display, the small UMD drive loading noises and vibrations – all that stuff was part of the experience as well. For example, it took me a wrong t
506.
by lxgr 6mo ago
The PSP has Internet connectivity too, no? It even got a WPA (AES even, but unfortunately only some unusual WPA1+AES mode at that) with a firmware update, so you didn’t necessarily need a second insecure SSID like you do for the DS (which i
507.
by lxgr 6mo ago
See how dangerous road conditions out in the open can be? This won't happen to you in a tunnel! Consider commissioning one with us today :)
508.
by lxgr 6mo ago
A counterexample is not a valid refutation of the general point. It can be both true that Google will deanonymize you, given the chance, and that anonymous attestation is possible.
509.
by lxgr 6mo ago
They’re really not good enough, unless you consider 64 GB of memory or more consumer grade.
510.
by lxgr 6mo ago
Fair enough, I can see why not. To me, it seems like just the right amount of friction, and user expectations can work in favor of privacy here: People will hopefully refuse to tap their ID on their phone for a service where they want to re

More ›