Live data from Hacker News

Facebook Asking for Some New Users' Email Passwords

thedailybeast.com

181–190 of 377 posts

Re: Facebook Asking for Some New Users' Email Passwords

#182
post #67

I just don't understand how this gets implemented without someone speaking up and saying "hey, wait, isn't this an insane thing to do?". I would guess it's some combination of the complainers being ignored, and people at a higher level thinking "well we're doing this in a secure way, as long as the user trusts us, and why wouldn't they trust us, we're Facebook!".

Easy. The engineers who built it care mostly about their total compensation and getting promoted. They therefore gleefully implement the product requirements. The PMs behind the idea also care about the above, except they are held to account by business objectives. By narrowly optimizing for a particular objective (reducing account fraud) in an unprincipled manner, they come up with an insane feature idea like this.…

The finance industry gets (often rightfully) vilified for having flexible morals and reckless profit seeking, but this is not something unique to finance. Finance was traditionally the environment that enabled this sort of behavior, but the root cause is that fundamental human behavior is still fairly reptilian in nature.

As technologists we like to think that we are above this behavior, but we are not. All it takes is someone to wave enough dollar bills in front of our eyes and we'll mostly justify our actions with a mixture of whataboutism and by saying "I'm just a lowly cog in the machine".

I'm seeing a great many parallels in the short term predatory and risky behavior in the financial machinations of the past and the behavior of tech firms including FAANG today. Even with the best intentions, the system eventually evolves to a point where the show is being run by fundamentally the same sort of people in both industries. Perhaps it is because it is these sort of people who strive in a cut-throat corporate environment that is itself in a cut-throat capitalist environment.

I'm not saying this as some sort of hard line leftist either - hell, I work in systematic trading so I'm as much part of the system as one can be. Yeah sure, I should hold true to my morals, but what about all the others who are willing to replace me at a moments notice? I'm just a cog in the machine, my action will not make an ounce of difference and only cause hardship for myself.

Oh the irony!

Re: Facebook Asking for Some New Users' Email Passwords

#183
post #72

Earlier quoted context omitted.

I tried to find more information about this statement: "When authenticating the login you authorize one of Klarnas third parties to log into your bank account as you, allowing them to pull records of all your financial transactions, account statements etc.“ Do you have any source to verify this claim? That they can and do pull down this information. I would like to know if they really have all that information or not…

Perhaps a GDPR takeout request could answer this? Provided they’re doing things by the book.

Klarna shits on GDPR and giggles while doing so.

Ive been asking them singe GDPR took effect to provide me with all details they have about me, and to delete my account.

Not even a response.

They claim "financial institutions" are exempt due to money laundering laws.

That I understand, financial transactions they can keep, but I know a friend works there, they dont only keep financial transactions, they keep data of every website/shop I visited where they have an "integration with".

Re: Facebook Asking for Some New Users' Email Passwords

#184
post #65

All of these types of "hey, give us your password to this other system" are just training users to get phished. IMO the worst offender in this is Plaid, which has created a service where millions of people are giving their banking credentials so some random startup can mine your transaction data. And people think FB has privacy implications...

Swedish payment processor Klarna does something similar to this as well. If bying something through the platform by direct bank transfer you are asked to sign to your bank to accept the payment using BankID [0], which is normal. What is not normal is that they grab your personal identification number and send a login request using BankID before you open your app. When authenticating the login you authorize one of Kla…

The new EU Financial Services Directive formalizes this process and forces banks to provide an API for third-party payment providers.

Re: Facebook Asking for Some New Users' Email Passwords

#185

All of these types of "hey, give us your password to this other system" are just training users to get phished. IMO the worst offender in this is Plaid, which has created a service where millions of people are giving their banking credentials so some random startup can mine your transaction data. And people think FB has privacy implications...

They do this because banks refuse to implement a properly-secured read-only API for granting access to transaction data. (I think maybe Chase now finally has one) Maybe if the banks realize their customers are handing over their credentials in large numbers, it will light a fire under them to build a real solution.

Probably not, because liability for non-credit accounts is up to the customer, not the bank. If people give up access credentials then they only have themselves to blame.

Re: Facebook Asking for Some New Users' Email Passwords

#186

I think Facebook is very desperate and they don't seem to have a choice. You see, Facebook has Facebook.com, Instagram and Whatsapp. Facebook.com has already reached it's peak and is not going to grow. Instagram is likely to have the same trajectory as Facebook.com and Whatsapp is not making them money anyways. They failed to get into any new market or come up with any decent product. And they are supposed to compete…

You can't possibly be serious. Google continues to make the majority of their money from advertising. And since those early days they have not released a single product which has helped to diversify their revenue stream. But they've had plenty of failures along the way. Facebook is far more interesting in terms of diversification. Payments via Messenger/WhatsApp is going to be great for them and is already doing well…

Did you just discard Google Cloud, Youtube Rentals, Google Apps,etc but give Facebook credit for messenger payments?

Re: Facebook Asking for Some New Users' Email Passwords

#187
post #67

I just don't understand how this gets implemented without someone speaking up and saying "hey, wait, isn't this an insane thing to do?". I would guess it's some combination of the complainers being ignored, and people at a higher level thinking "well we're doing this in a secure way, as long as the user trusts us, and why wouldn't they trust us, we're Facebook!".

> and people at a higher level thinking "well we're doing this in a secure way"

I have never had a higher level person worrying at all about security except as a nuisance when prodded.

Re: Facebook Asking for Some New Users' Email Passwords

#188

I think Facebook is very desperate and they don't seem to have a choice. You see, Facebook has Facebook.com, Instagram and Whatsapp. Facebook.com has already reached it's peak and is not going to grow. Instagram is likely to have the same trajectory as Facebook.com and Whatsapp is not making them money anyways. They failed to get into any new market or come up with any decent product. And they are supposed to compete…

You can't possibly be serious. Google continues to make the majority of their money from advertising. And since those early days they have not released a single product which has helped to diversify their revenue stream. But they've had plenty of failures along the way. Facebook is far more interesting in terms of diversification. Payments via Messenger/WhatsApp is going to be great for them and is already doing well…

The only big companies that seem to be able to diversify their income somewhat are Microsoft and Amazon. Microsoft makes its money from various products and services, and Amazon now makes a lot of money from AWS let alone its online shopping. Compared to those two Google and Facebook are one hit wonders.

Re: Facebook Asking for Some New Users' Email Passwords

#189

All of these types of "hey, give us your password to this other system" are just training users to get phished. IMO the worst offender in this is Plaid, which has created a service where millions of people are giving their banking credentials so some random startup can mine your transaction data. And people think FB has privacy implications...

This is by far my biggest concern with the new PSD2 system that's about to be launched. Even though I can understand why it might help break up monopolies, I still worry that easier access to banking details is going to end disastrously for people's privacy.

Re: Facebook Asking for Some New Users' Email Passwords

#190

I think Facebook is very desperate and they don't seem to have a choice. You see, Facebook has Facebook.com, Instagram and Whatsapp. Facebook.com has already reached it's peak and is not going to grow. Instagram is likely to have the same trajectory as Facebook.com and Whatsapp is not making them money anyways. They failed to get into any new market or come up with any decent product. And they are supposed to compete…

> extremely competitive offerings Chrome OS Have you followed news recently? It's dead.

Explain why? They've stopped their hardware dev team, but the os development continues
Post reply on HN