If you're bored, have Claude pull apart your APK and do a privacy report.

Your banking app is almost certainly using a company like (horrible and evil) Yodlee, which is given data by your banking app under the guise of "organizing your transactions into categories". Yodlee then quickly de-anonymizes it, by the identifiers which are identical and given to firebase, and various other orgs. Yodlee has been caught doing this before, and they still operate.

Lots of other companies do this, so if your banking app has any callbacks to anywhere but the bank itself, it's nothing but trouble.

After deanoymoization, such data is of course sold to everyone, including intelligence agencies, domestic and foreign.

▲

jameshart 4 hours ago | parent | next [-]

What does this have to do with the claim at hand which is ‘we need to keep our comms infrastructure secure because critical things like the primary way our population conducts economic transactions depend upon it’?

That you find the population’s choice to use such mechanisms questionable, or that you think it is foolhardy to do so, does nothing to disobligate the government from trying to keep that infrastructure up and running.

▲

b112 3 hours ago | parent | next [-]

The point more is, this is one primary mechanism to spy on the populous. Primarily via 5-eyes, which means Americans are buying this data to spy on UK citizens.

▲

staplers 4 hours ago | parent | prev [-]

I think they are pointing out it's an oxymoron. There's nothing to secure if the service itself is insecure and leaking..

▲

TallGuyShort 3 hours ago | parent [-]

It's classic what-aboutism though. Availability is part of security and that's what seems to be considered here. It's also the more immediate concern. Yes, the software supply chain and where your data goes has high potential for compromise. But I'm not actually seeing rampant fraud in my accounts or data leaks from my bank very often.

▲

b112 3 hours ago | parent [-]

High potential for compromise? No, the point is that every single transaction you make is being sold on the open market, that's the problem. Using cash prevents this. Using debit cards, credit cards, banking apps ensures this.

The banks provide the data anonymized, but then provide means to de-anonymize it.

	▲	TallGuyShort 3 hours ago \| parent [-]
		You are discussing concerns that are completely orthogonal to the thread. The availability of digital banking was the concern. Not end to end privacy.

▲

TallGuyShort 4 hours ago | parent | prev [-]

So yeah that sucks, but... what does that have to do with the concerns being discussed here?

Digital banking in some form is pretty unavoidable for me unless I want a "live in the woods" type lifestyle and all the consequences of it. And I don't even live in the UK where they've embraced it more. My mortgage was sold to a very distant company and we've had mail problems. My dog recently needed middle of the night surgery and they wouldn't start without payment that exceeded normal cash reserves + daily.

Yes, all these things suck, but shooting digital banking in the knee without a solution to all that isn't helpful.

▲

autoexec 3 hours ago | parent [-]

Digital banking might be unavoidable but what did your app do that you couldn't have possibly done via your banks website?

▲

TallGuyShort 3 hours ago | parent [-]

You know, I didn't rush my laptop to the vet with me. If you're going to argue with the "mobile phones and banking app" line to this extent, I will freely admit: yes, if you want to be a Luddite, satellites are indeed unnecessary. You are absolutely right. But still not convincing me that's a weird thing for them call out here.

▲

3 hours ago | parent | next [-]

[deleted]

▲

b112 3 hours ago | parent | prev [-]

Realistically, paying your mortgage isn't giving any data a credit pull wouldn't. It's not a secret you live where you do. And one off emergencies aren't the problem.

It's foregoing cash for every single thing you do. That, combined with the telco selling data, Google linking that data to the number, and apps such as your banking app working in this same ecosystem, and companies such as Yodlee, your profile has a minute by minute location, plus what you spend and where.

It lets intelligence agencies, buying this data, create links between people. Who you know. Who you talk to. Where you go. What your hobbies are.

This gives the power of manipulation, for knowing who you are in the real world, combined with what you do online, means they know you better than you know yourself. And that's quite important, if you want to manipulate opinion.

All this may not matter to you, and if so, that's fine.

But this data is, quite frankly, what gives the Americans the power they have. The Americans aren't mighty due to guns, and weapons, and an army. They are mighty because of information.

Information is how you send a mere 40 dudes to kidnap the President and his wife from Venezuela. Information is how drone strikes perform targetted attacks. Information is how you manipulate elections in foreign countries. It's the sort of power that means you don't even have to fire a shot, to overthrow a government.

This information is what modern banking, and its apps, and companies such as Yodlee give to the Americans.

And as a Canadian, with the Americans blathering on about 51st state this and that, I am perhaps over sensitive to this fact. Because the last thing we need, is to give Americans power over us.

Any power.

Even the tiniest bit.

And information? Is more powerful than anything else they have.

▲

TallGuyShort 3 hours ago | parent [-]

You are discussing concerns that are completely orthogonal to the thread. The availability of digital banking was the concern. Not end to end privacy.

	▲	b112 3 hours ago \| parent [-]
		It's OK. You can talk about things tangential to the main thread. It happens all the time on HN. And I'm not blaming you for anything. My frustration is likely just showing, on this specific topic.