Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I think it's clear why it's convenient to be able to instantly verify a bank account, and that instant verification is the reason you want account information. What's not clear is why that makes giving bank account information to a startup a reasonable risk.


What does "reasonable" mean?


* Effectively mitigated by countermeasures

* Access scoped narrowly to a simple use case

* Backend by the assets of a very significant stakeholder

* Risk outweighed by benefit

I'm not saying Coinbase is unreasonable. I have no idea how they work under the hood at all. I'm just saying, it is not suddenly O.K. to give bank account information to startups simply because there's a way to use Paypal that also takes that information. Paypal also doesn't have my account information.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: