Looks like mwave are requesting login bank login credentials when making purchases now!
https://lolware.net/2016/11/17/requesting_bank_login.html
I've shopped at here before (the amex statement credit offers), but they're no longer viable. Luckily I didn't get the prompt. Wouldn't this breaking the T&C of the bank?
Actually it is tragedy that MWave, apparently "Australia's Largest Online Tech Retailer" can get away with doing it.
Hacker News discussion — interestingly many people don't think it's a big deal. I guess the same with POLi Payments — your banking site appears inside an iframe where you need to provide username/password to authenticate. The model is fundamentally broken IMHO.
I used POLi once after seeing comments here about avoiding Jetstar fees. But never again. It is such a kludge that I can't believe it is still available.
I'm…. I'm just going to hide under my desk now.
Yes, I've spoken to them. They don't see an issue.
you would have to be absolutely nuts to let some 3rd party access your bank account.
the solution is simple - do not purchase anything from mwave.
Is this implemented only recently? I've bought there 2 months ago and never got that.
I really hope this doesn't become normal/accepted.
@scotty: I'm surprised that people on HN are defending it…
@scupper: Me too, I used the AMEX $40 statement credit deal 2x in early September. Looks like it was happening mid-october from tonyjzx's whirlpool link: https://forums.whirlpool.net.au/forum-replies.cfm?t=2556768#…
Such a shame, these guys were pretty good handling a return of a faulty keyboard.
MWave not only verifies bank access but also downloads upto 180 days of bank statements. Data mining and buyer profiling possible.
This breaks more than T&Cs, it breaks every form of common sense imaginable. If something goes wrong and you gave the details away, I wouldn't presume getting compensated. This is comedy.