You've read all the laws? Regardless, there is likely a legal framework preventing competition and requiring the banks to standardise and coordinate. Otherwise people would go start their own bank that didn't require remote attestation; because the best way to pick up customers is to be flexible about letting them access their own money. In a free market there is a lot of pressure on financial service companies to butter their customers up (at least until the customer owes them cash).
If you're dealing with a legal oligopoly then it is expected that the quality won't be so great.
EU PSD2 is behind that push for "secure" banking. As if they couldn't be arsed to use the bank card we all carry for security...
(The thing that banks are afraid is malware spoofing the bank app's UI and the user then approves a fraudulent transaction... not sure how to prevent that tbh)
Easily fixed kick banks that wont reverse transactions out of payment networks. Kick banks that won't follow through with criminal investigations out of payment networks.
But it is a design trade-off. The opposite case can be seem in the many websites asking to send you notifications, and the many flavours of cookie notices. When you have to ask the user permission to do anything and everything, the user gets annoyed and desensitized. They start allowing everything (my always collects dozens of notification-enabled websites if given the chance), and the point of asking for permission is lost.
How so? There seems a fairly inherent tension between having things just work by default and hiding surface area for fingerprinting behind permissions pop ups. For example say you go to a maps website, how do you decide whether to share the users location with the website? Or enable webGL functionality to render some fancy layout on the screen? As a user having to enable all that stuff per-website is annoying.
Starting WHAT. Seriously, is there something in the water?
The US has gone out of its way to prove that it is an unreliable partner. To Europe, to Canada, to its allies all over the world. It is obvious that that would result in re-evaluation of the relationship. You can't just upend 80 years of building up a relationship and expect that it will be without consequences. Just like your spouse would have a right to re-evaluate their relationship with you if you punched them in the face to remind them that 'you hold all the cards'.
If you believe that the EU is 'starting it' you are exemplifying the mentality that lead us to where we are today: that might makes right and that if you're abused you should just take it and that even an attempt to leave is considered betrayal.
reply