Teller – API for your bank account
151–160 of 282 posts
Re: Teller – API for your bank account
#152Re: Teller – API for your bank account
#153Earlier quoted context omitted.
Hi, Firstly, we don't always need a credential. Some banks provide other auth mechanisms, e.g. EMV CAP. We use this for Barclays and Nationwide. Using Teller might not violate your bank's terms of service, which is why we advise you to read them in conjunction with ours. Furthermore, it is the view of some senior bank people that I speak to that PSD2 will make such clauses in banking terms illegal. It is also worth m…
> It is also worth mentioning there has never been a single case of fraud or loss attributed to "screen-scraping" This response makes me angry. Every service worth attacking will have security problems at some point. You're running a store of bank credentials, which you have to have access to (as opposed to password managers for example which can store user encrypted data). Given enough time, one of these services wi…
Re: Teller – API for your bank account
#154Earlier quoted context omitted.
Hi, Firstly, we don't always need a credential. Some banks provide other auth mechanisms, e.g. EMV CAP. We use this for Barclays and Nationwide. Using Teller might not violate your bank's terms of service, which is why we advise you to read them in conjunction with ours. Furthermore, it is the view of some senior bank people that I speak to that PSD2 will make such clauses in banking terms illegal. It is also worth m…
It sounds to me like you added a lot of detail around a core message of "yes, you may be violating your bank's ToS by using our service, please verify this by reading through page upon page of legalese in your spare time." Well... no thanks. I (and likely many others) would only consider using such a service if I had a guarantee, both from you and my bank, up front. from your ToS: >"We are not liable for any loss or…
Re: Teller – API for your bank account
#155Earlier quoted context omitted.
> german-language-only Ah the horror. Last week it was bleating that German laws are written in German, this week it's bleating that German bank documentation is written in German.
English is the working language of software development, so it does make a degree of sense to bemoan the fact that the API documentation is only available in German.
The software I use at work is developed by a German-speaking team based on German documentation. I think the code is mostly English although they often use German identifiers when there is no straightforward translation[0]. It's highly specific to the German legal environment and of absolutely no use abroad anyway. Translating everything twice just introduces more errors.
Re: Teller – API for your bank account
#156Earlier quoted context omitted.
> german-language-only Ah the horror. Last week it was bleating that German laws are written in German, this week it's bleating that German bank documentation is written in German.
English is the working language of software development, so it does make a degree of sense to bemoan the fact that the API documentation is only available in German.
Re: Teller – API for your bank account
#157Earlier quoted context omitted.
Enterprisey APIs with adoption beat nicely designed APIs without adoption anytime. Besides, that does not explain, why none of the other banks can get their act together. If FinTS is too difficult to implement, how come they are not offering something simpler?
> Enterprisey APIs with adoption Your conflation of "bad" with "enterprisey" is unfortunate. Also, is it really adoption if different banks only support specific features/versions? > If FinTS is too difficult to implement, how come they are not offering something simpler? Well banks aren't really in the business of APIs, are they? Nobody is graduating #2 in their class at Stanford with a CS degree and going to work f…
Re: Teller – API for your bank account
#158Earlier quoted context omitted.
Are they required to adhere to a standardized API? If not, then I think there's still some utility in a service that can normalize that stuff and provide you with a single, consistent interface.
My understanding is that the EU PSD2 regulation indeed is supposed to make banks adhere to a standardised API. That being said, I wouldn't expect a super easy to use REST api with documentation powered by readme.io.
There are however some inititives for open API standards that might be accepted by a majority of the banks.
Re: Teller – API for your bank account
#159UK banks don't accept any liability if you give your online banking credentials to a third party. If some fraud was to come about as a result of someone using Teller then they would be out of pocket or has Teller got agreements with the compatible banks to overcome this situation (either by Teller reimbursing the customer or the bank)?
Hi, Firstly, we don't always need a credential. Some banks provide other auth mechanisms, e.g. EMV CAP. We use this for Barclays and Nationwide. Using Teller might not violate your bank's terms of service, which is why we advise you to read them in conjunction with ours. Furthermore, it is the view of some senior bank people that I speak to that PSD2 will make such clauses in banking terms illegal. It is also worth m…
If that is close to explicitly as you have stated then either 1) The senior bank people you talked to are lying to you 2) the senior bank people you talked to really don't know anything about PSD2 3) They mistated to you how PSD2 changes will affect this 4) You misunderstood what they mentioned about PSD2 changes.
If a bank mentions in its clauses as per PSD2, that only authorized persons/firms are use an API and their acccess, they are authorized to negate any liability if it was given/accessed by an unauthorized party. Banks are required to make API's available (not same as accessible) to any SaaS or other developer as long as it is authorized by the bank.
Rather than relying on hearsay or in conversation on crucial regulatory changes , might I suggest this: https://www.createspace.com/5772402
Re: Teller – API for your bank account
#160This looks really cool, but I'm nervous about trying it. Can they provide any guarantees?
While we make every effort to ensure our services are available, secure, accurate, complete, and free from defects we provide no guarantees, conditions, or warranties of this, express or implied. We are not liable for any loss or damage that may result from your use of our services. This includes any direct, indirect, or consequential losses; any loss or damage caused by tort, including negligence, breach of contract…
Will have to pass on it for now. Good to see a lot of growth in the FinTech industry though, with banks like Monzo popping up and all these smart investment sites like Nutmeg.