Quest: a bulletproof-secure, automated scraperby tlm (Prior)
|on Mar 19, 2005 at 04:39 UTC||Need Help??|
tlm has asked for the wisdom of the Perl Monks concerning the following question:
I want to write a Perl script that will periodically log in to my bank account's web page and report back a summary of information. This script should run securely and without supervision. Naturally, it will need to know sensitive information, such as passwords, account numbers, etc., and I wonder if it possible for a lowly monk wannabe to write a Perl script that keeps this information safe.
The first solution that occurred to me was to rely on a source filter like Filter::Crypto, but the following caveat in that module's man page gives me pause:
I have thought of other schemes, too outlandish and elaborate to bother you with. I have looked in various sources (e.g. perlsec, book searches in Amazon, Google, etc., but I have found nothing that addresses my concerns.
Given that I'm no Donald Trump, it is probably safe to assume that no one is going to waste much time trying to break into my bank account, but I really don't want to take any chances (plus I am genuinely curious about how one goes about dealing with this problem without cutting any corners).
In case it makes any difference, the OS for which this script is intended is (Debian) Linux.
I look forward to reading your opinions on this.
Update: In retrospect I should have phrased the ending of this question as follows:
My question to you, fellow monks, is, if you wanted to set up such an automated screen scraper to collect data from your bank account, how would you do it? How would you architect the solution? What CPAN modules would you use? What other non-Perl software would you use? What special hardware does your solution require, if any? What books/articles/tutorials/authors would you consult to craft your solution?
the lowliest monk