Live data from Hacker News

First Open Banking API Sandbox in the UK

ukopenbanking.com

31–40 of 49 posts

Re: First Open Banking API Sandbox in the UK

#32
post #20

If you're in the UK and want a banking API (including payments and transfers), I'm building http://teller.io/ . It's been in private beta about 2.5 months and access will be opening more broadly soon. I couldn't wait for banks to get themselves into gear so I reverse engineered all of their mobile apps, took their private APIs and expose a single unified API through Teller. Here is a video of me cURL-ing my bank acco…

How did you reverse engineer the Natwest/Ulster/RBS app. It is my understanding they use certificate pinning?

Certificate pinning is easy to defeat.

Re: First Open Banking API Sandbox in the UK

#35
post #33

Earlier quoted context omitted.

Certificate pinning is easy to defeat.

Doesn't exactly answer the question..

If you can run the app on a jailbroken/rooted device, it's fairly easy to beat certificate pinning in a few different ways. Two that come to mind are:

* find the certificate file in the app and replace it with your own.

* hook the function that verifies the certificate and make it return true.

Re: First Open Banking API Sandbox in the UK

#36
post #10

I've been dreaming of a standardized banking API for as long as I've been using online banking. It crushes my soul every time Mint makes me send them my actual log in credentials just to scrape transaction data. Really hope this catches on, but I think too many orgs have a vested interest in being the gate-keepers of your banking data.

Thanks!

Re: First Open Banking API Sandbox in the UK

#37

Finally loaded . Here is the blurb from their website: UK Open Banking A demo of Open Banking APIs in the UK In February 2016, a group of experts from the banking, FinTech, security and open data communities published a framework to deliver an open standard for Application Programming Interfaces (APIs) for UK banks. This work, led by HM Treasury, aims to increase competition and innovation in and around banking to im…

thanks for your patience, should be faster now!

Re: First Open Banking API Sandbox in the UK

#38
post #18
post #16

Earlier quoted context omitted.

Let by us at the Open Bank Project (www.openbankproject.com)

How does this work. Will banks be using the same API structure in general, or is it more sort of an advice type of thing. Also what type of operations are intended to be supported (read/write?)

The report sets out a framework rather than a specification at this point. It talks about a phased approach starting with open data (e.g. branches, products) then transaction history and then write (e.g. payment) options. PSD2 from the EU might well influence the operations supported first.

Re: First Open Banking API Sandbox in the UK

#39
post #30

Earlier quoted context omitted.

Mint has always pulled my data automatically from BOA, Chase and Wellfargo. Which banks are you using??

Mint is logging in on your behalf, unless you have a different service than I do.

Yep, the OBP approach is to use OAuth (currently 1.0a) so the App doesn't have to see the credentials.

Re: First Open Banking API Sandbox in the UK

#40
post #18
post #16

Earlier quoted context omitted.

Let by us at the Open Bank Project (www.openbankproject.com)

How does this work. Will banks be using the same API structure in general, or is it more sort of an advice type of thing. Also what type of operations are intended to be supported (read/write?)

HM Treasury report defo aims at the UK Banks supporting the same API - which is the mission of Open Bank Project.
Post reply on HN