Hacker News Reader

Aaargh20318

> The online banking CRUD interface might have up-to-date data, but it isn't an API, and being behind some weird proprietary single-sign-on setup makes it pretty hard to scrape, too.

That’a why they also provide an API. They are required by law to do so (https://en.wikipedia.org/wiki/Payment_Services_Directive)

> I don't think there's any bank in North America that requires 2FA to login to your online banking.

This is required by the same law.

View on HN

Bank of America only added 2FA as an opt-in option starting in 2017. It is most definitely not required... Law or not.

I'm pretty certain it's the same way with every other major US bank.

@Aaargh20318 could've mentioned that he linked to the EU laws about banking.

> > I don't think there's any bank in North America that requires 2FA to login to your online banking.

> This is required by the same law.

FYI: no bank has to follow EU laws in North America.

Reply on news.ycombinator.com