this post was submitted on 24 Oct 2024
753 points (99.0% liked)

Technology

58999 readers
4183 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] 01189998819991197253@infosec.pub -1 points 6 days ago (1 children)

If truly masked, it might be fine. But the site has to gather that data in order to append it to the API call and it, therefore, mean that they could keep it (even of they actually may not). There are ways around it, such as with session tokens passed between the social media's page and the bank's official API page. But, knowing fb, they won't use the latter.

[–] InverseParallax@lemmy.world 2 points 5 days ago (1 children)

Obviously not, it's like Google authentication , you log into a site, doesn't mean the site can see your Gmail.

It depends how it's implemented. If they implement correctly, then you're right. But not all do. That's a fact that bit me in the arse once, and I no longer use those features for lack of trust.