webo · HackerTrans

hace 2 mesesdiscuss

Plaid has an option to let the client/provider accept plain account + routing numbers, a lot of apps for whatever purpose don't use it.

webo

hace 2 mesesdiscuss

routing+account numbers are not that sensitive. that's been API for how we transact money since pre-historic times. plaid gets access to your online account with access personal data, security details, documents, transactions, statements, write-access etc.

webo

hace 2 mesesdiscuss

Hijacking this comment to complain about fintech apps / saas providers requiring Plaid - please stop.

For example, Coinbase requires logging in with Plaid to... setup auto-pay for their credit card statements. No way to just provide account/routing numbers the good ole way.

There's lots of issues with Plaid but one big one is that banks (e.g big ones like BofA) can lock your account due to suspicious login with Plaid.

https://x.com/kanateven/status/1973793740331368841

webo

hace 8 mesesdiscuss

I was curious if LLMs are good for this problem. ChatGPT-5.1-Thinking one-shotted a correct Python script without any library use (https://pastecode.io/s/jg6ggxpm).

Claude Opus failed to solve after trying for a while.

webo

hace 4 añosdiscuss

>Consumers, meanwhile, split down the middle between cynics who’re certain it’s worthless and true-believers who think it sets the standard for how security should work.

There are many dependencies in the software supply chain that are maintained by a single person (open source or not),so it seems silly to default assume malicious intent for employees of a software vendor with a good reputation.

There are bad actors that no SOC2 control would catch, and there are good actors (the default) where no SOC2 control affect their behavior.

SOC2 is never part of my decision making, rather, I carefully study the company and product offerings to decide if right fit.

(This is coming from someone who goes thru an annual SOC2 audit)

https://xkcd.com/2347/

webo

hace 4 añosdiscuss

SupplyPike | Software Engineer, Sr. Software Engineer | Fayetteville, Arkansas | Remote-ok (US/CA)

SupplyPike (https://www.supplypike.com/) is on a mission to change the lives of retail suppliers by giving them amazing tools to change the way they navigate supply chain problems.

In the past 2 years, we've grown 30->80 people, 1000% in customers, and made $300M+ in direct impact in supplier's businesses. We work with new and upcoming CPG brands as well as some of the world's largest brands.

We're in a hyper-growth mode and would love to have smart, passionate, and ambitious software engineers join the team!

Our tech stack is primarily typescript, nodejs, react, postgres, elasticsearch (5+ TB), mongo. We have an excellent SRE team who builds and maintains devops tools (prometheus, grafana, flux, github actions) and Kubernetes clusters (AWS EKS). We connect with 60+ different external sources which introduces some interesting engineering and organizational challenges.

  * email in bio (mention HN in subject line)
  * https://www.instagram.com/supplypike/
  * https://www.supplypike.com/careers

webo

hace 7 añosdiscuss

Works fine for me on iOS safari.

comments