秋田预测市场 · Discord 审计

API支持ACH转账功能的安全争议

2026-07-20 · Kalshi · 8 条相关讨论

betaclone 2026-07-20 08:35:39

<@1294044400065839177> sorry to ask again but is there a world where ACH transfers could be initiated via the API?

<@1294044400065839177> sorry to ask again but is there a world where ACH transfers could be initiated via the API?

bence 2026-07-20 09:05:01

i hope that never gets added, introduces a big security risk

i hope that never gets added, introduces a big security risk

betaclone 2026-07-20 09:07:07

No one would make you use it. Plenty of banks have API controlled transfers

No one would make you use it. Plenty of banks have API controlled transfers

bence 2026-07-20 09:18:43

it means transfer can start from my ec2 and not just my mfa web ui, already a second vector

it means transfer can start from my ec2 and not just my mfa web ui, already a second vector

VOXindie 2026-07-20 09:19:08

god no, that would mean you screw up a screenshot of your API key or something and someone has complete access to your bank account

god no, that would mean you screw up a screenshot of your API key or something and someone has complete access to your bank account

brunoBowser 2026-07-20 09:28:19

no they don't - some banks do but it is a very, very small minority and access is usually limited to large corporate customers and tightly controlled in scope. Maybe in Europe where open banking standards have taken some hold but not in the US.

no they don't - some banks do but it is a very, very small minority and access is usually limited to large corporate customers and tightly controlled in scope. Maybe in Europe where open banking standards have taken some hold but not in the US.

brunoBowser 2026-07-20 09:32:17

I don't necessarily agree with the arguments against it that it is a bad idea (if there are proper MFA standards to enable the feature prior) - just that it is not at all common in the US banking system

I don't necessarily agree with the arguments against it that it is a bad idea (if there are proper MFA standards to enable the feature prior) - just that it is not at all common in the US banking system

betaclone 2026-07-20 09:47:00

Apparently I'm alone on this one

Apparently I'm alone on this one