Live data from Hacker News

Teller – API for your bank account

blog.teller.io

151–160 of 282 posts

Re: Teller – API for your bank account

#153

Earlier quoted context omitted.

Hi, Firstly, we don't always need a credential. Some banks provide other auth mechanisms, e.g. EMV CAP. We use this for Barclays and Nationwide. Using Teller might not violate your bank's terms of service, which is why we advise you to read them in conjunction with ours. Furthermore, it is the view of some senior bank people that I speak to that PSD2 will make such clauses in banking terms illegal. It is also worth m…

> It is also worth mentioning there has never been a single case of fraud or loss attributed to "screen-scraping" This response makes me angry. Every service worth attacking will have security problems at some point. You're running a store of bank credentials, which you have to have access to (as opposed to password managers for example which can store user encrypted data). Given enough time, one of these services wi…

This is what always worried me about services like Mint.

Re: Teller – API for your bank account

#154

Earlier quoted context omitted.

Hi, Firstly, we don't always need a credential. Some banks provide other auth mechanisms, e.g. EMV CAP. We use this for Barclays and Nationwide. Using Teller might not violate your bank's terms of service, which is why we advise you to read them in conjunction with ours. Furthermore, it is the view of some senior bank people that I speak to that PSD2 will make such clauses in banking terms illegal. It is also worth m…

It sounds to me like you added a lot of detail around a core message of "yes, you may be violating your bank's ToS by using our service, please verify this by reading through page upon page of legalese in your spare time." Well... no thanks. I (and likely many others) would only consider using such a service if I had a guarantee, both from you and my bank, up front. from your ToS: >"We are not liable for any loss or…

Yea, unless you're developing jointly with banks, with lots of oversight and liability insurance, this is a disaster waiting to happen.

Re: Teller – API for your bank account

#155

Earlier quoted context omitted.

> german-language-only Ah the horror. Last week it was bleating that German laws are written in German, this week it's bleating that German bank documentation is written in German.

English is the working language of software development, so it does make a degree of sense to bemoan the fact that the API documentation is only available in German.

A significant amount of software development in Germany is done in German only, especially if you solve Germany-specific problems with your software (such as accessing banks). English far from being a general working language for software development here.

The software I use at work is developed by a German-speaking team based on German documentation. I think the code is mostly English although they often use German identifiers when there is no straightforward translation[0]. It's highly specific to the German legal environment and of absolutely no use abroad anyway. Translating everything twice just introduces more errors.

Re: Teller – API for your bank account

#156

Earlier quoted context omitted.

> german-language-only Ah the horror. Last week it was bleating that German laws are written in German, this week it's bleating that German bank documentation is written in German.

English is the working language of software development, so it does make a degree of sense to bemoan the fact that the API documentation is only available in German.

This is not true at all. There's plenty of code written with comments relevant to the country in question. It's not for you to decide what other developers should make their working language. I'd like to see you go to China and ask them all to stop commenting their code in Mandarin.

Re: Teller – API for your bank account

#157
post #117

Earlier quoted context omitted.

Enterprisey APIs with adoption beat nicely designed APIs without adoption anytime. Besides, that does not explain, why none of the other banks can get their act together. If FinTS is too difficult to implement, how come they are not offering something simpler?

> Enterprisey APIs with adoption Your conflation of "bad" with "enterprisey" is unfortunate. Also, is it really adoption if different banks only support specific features/versions? > If FinTS is too difficult to implement, how come they are not offering something simpler? Well banks aren't really in the business of APIs, are they? Nobody is graduating #2 in their class at Stanford with a CS degree and going to work f…

There is a huge amount of software using those APIs including ones written by one-person-teams so the situation can't be too bad.

Re: Teller – API for your bank account

#158

Earlier quoted context omitted.

Are they required to adhere to a standardized API? If not, then I think there's still some utility in a service that can normalize that stuff and provide you with a single, consistent interface.

My understanding is that the EU PSD2 regulation indeed is supposed to make banks adhere to a standardised API. That being said, I wouldn't expect a super easy to use REST api with documentation powered by readme.io.

If you read the legislation (?) you will see that they are actually very vague in how the banks will provide access. I think it is already a great success that they (fingers crossed) will manage to force the banks to provide access to the data in any form and gave them little wiggle room for justifications to get out of it.

There are however some inititives for open API standards that might be accepted by a majority of the banks.

Re: Teller – API for your bank account

#159

UK banks don't accept any liability if you give your online banking credentials to a third party. If some fraud was to come about as a result of someone using Teller then they would be out of pocket or has Teller got agreements with the compatible banks to overcome this situation (either by Teller reimbursing the customer or the bank)?

Hi, Firstly, we don't always need a credential. Some banks provide other auth mechanisms, e.g. EMV CAP. We use this for Barclays and Nationwide. Using Teller might not violate your bank's terms of service, which is why we advise you to read them in conjunction with ours. Furthermore, it is the view of some senior bank people that I speak to that PSD2 will make such clauses in banking terms illegal. It is also worth m…

>it is the view of some senior bank people that I speak to that PSD2 will make such clauses in banking terms illegal

If that is close to explicitly as you have stated then either 1) The senior bank people you talked to are lying to you 2) the senior bank people you talked to really don't know anything about PSD2 3) They mistated to you how PSD2 changes will affect this 4) You misunderstood what they mentioned about PSD2 changes.

If a bank mentions in its clauses as per PSD2, that only authorized persons/firms are use an API and their acccess, they are authorized to negate any liability if it was given/accessed by an unauthorized party. Banks are required to make API's available (not same as accessible) to any SaaS or other developer as long as it is authorized by the bank.

Rather than relying on hearsay or in conversation on crucial regulatory changes , might I suggest this: https://www.createspace.com/5772402

Re: Teller – API for your bank account

#160
post #135
post #81

This looks really cool, but I'm nervous about trying it. Can they provide any guarantees?

While we make every effort to ensure our services are available, secure, accurate, complete, and free from defects we provide no guarantees, conditions, or warranties of this, express or implied. We are not liable for any loss or damage that may result from your use of our services. This includes any direct, indirect, or consequential losses; any loss or damage caused by tort, including negligence, breach of contract…

That's a shame.

Will have to pass on it for now. Good to see a lot of growth in the FinTech industry though, with banks like Monzo popping up and all these smart investment sites like Nutmeg.

Post reply on HN