Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> it does maintain the high level of security that Plaid requires.

When plaids infrastructure gets popped the fallout is going to be incredible. Hundreds of thousands of bank logins, ripe for the picking.



And they explicitly disclaimed responsibility for security breaches.

>TO THE EXTENT PERMITTED BY LAW, PLAID, ITS AFFILIATES AND ITS AND THEIR SUPPLIERS WILL NOT BE RESPONSIBLE FOR: (A) ANY LOST PROFITS, LOSS OF USE, LOST OR INACCURATE DATA, FAILURE OF SECURITY MECHANISMS, FINANCIAL LOSSES, OR ANY INDIRECT, SPECIAL, INCIDENTAL, RELIANCE OR CONSEQUENTIAL DAMAGES OF ANY KIND OR (B) ANY DAMAGES OR AMOUNTS EXCEEDING, IN THE AGGREGATE, THE GREATER OF (1) THE AMOUNT YOU PAID US TO USE THE PLATFORM AND (2) ONE HUNDRED U.S. DOLLARS (US $100).


The fact that banks do not uniformly have SSO and scoped cookies (so intermediaries aren’t required to store passwords with full access) is awful.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: