Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

While most of those points generally are true I'd say that banking in Europe is only marginally better.

They still have weird, mostly paper-based processes and decades-old mainframes (though that's not necessarily a bad thing). Not long ago the 2nd factor consisted of a paper slip with enumerated transaction numbers.

You'd have a hard time finding a bank that allows you to easily export data to accounting software. APIs accessible to customers are something unheard of.

All that nagging aside, a reason for US banks being even more stuck in the 70s might be the success of credit cards. Until the mid-90s hardly anyone used those in Europe and they're still not all that common, which in turn means that most cashless payments happen via some sort of card issued by banks directly.



Yeah, it's kind of weird. The positive things mentioned are definitely true, but some stuff that drove me batty in Italy:

* Your bank account is attached to a specific bank branch. Even after we moved across town, we always had to return there, like spawning salmon. Moving it seemed like we were asking them to give their children up for adoption. * The hours they were open were bad even by Italian standards. * Lots of little fees and things. Credit cards cost actual money to possess; compared to the US where you get money back if you use one sensibly.


On APIs, PSD2 http://psd2.it/ will be a game-changer for the European banking industry. Over the past 3 years all banks have been scrambling making their customers' data JSONable.

And they've been doing this as a general-case, as systems tend to be global with local characteristics and lots of glue rather than a decade back when they were disparate and lacking glue.

So when, Singapore for example, decides it wants PSD2 too (good example test case r.e. stringent data protection from regulator and competitive market) they can roll-out quickly.


There's Revolut, Monese, N26 to name a few where you can sign up without ever stepping foot into their office (via a phone app, by proving your ID either via video call or make a photo of your ID) and the entire process takes a few hours at most to verify on their end. After that, use your phone security (fingerprint, face ID?). Do you have that in U.S? Probably not.


I'm using ING DiBa in Germany and they lack a secure 2fa method. There are only two options available:

- SMS-TAN, which is vulnerable to SS7 hijacking and name spoofing.

- Index-TAN, aka the enumerated paper slip, which is only "pseudo two-factor": If you computer is pwned, it can ask you for the index matching the attacker's desired transaction.


ING DiBa offers banking apps for both iOS and Android, which can also serve as 2FA for online banking via the browser. The main banking app itself isn't all that good but the 2FA feature works fine.


Can't use those with HBCI. Also, I really wouldn't want my Android phone to serve as a single factor authentication method.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: