Indeed. Show security. Kinda like TSA.

"Mark Horn" <mark[at]hornclan.com> wrote in message
news:slrnes91uk.bio.mark[at]home.hornclan.com...
- quote -

The irony, of course, is that the FFIEC has gotten all worked up
about this, but they've only put a bandaid on the problem:

http://www.schneier.com/blog/archive...ailure_of.html

What they should be focusing on is the fact that there's already
a server authentication mechanism builtin to every implelmentation
of SSL. Of course, helping people use that would only require an
information campaign, not regulation!

Moreover, what the bank's are going to isn't even two factor
authentication. One of my banks has done something like this:

First screen: enter userid, then hit enter
Second screen: a picture comes up, you have to look at
it, then enter your password and hit enter.

Where's the second factor? This is a mechanism to try and convince
you that you're dealing with the correct bank and you're not being
phished. But, anyone who's got a phishing site could easily be a
man-in-the-middle instead.

What a waste.

On 2007-02-03, Dick Watson <littlegreengecko[at]mind-enufalready-spring.com> wrote:
- quote -

"Two Factor Authentication," the new rage at the banks dues to some
regulatory edict, seems to really break the screen scrapers. (I.e., Yodlee
and CashEdge, through whom Money gets lots of its data.) I suspect it's also
broken Money for some direct connect (without bogus disclaimer about not
really being all that direct) OFX interface connected banks as well. in
Perhaps that's why the banking industry--normally averse to regulation in
any form--likes this regulation?

"Mr B" <MrB[at]discussions.microsoft.com> wrote in message
news:B9475004-641B-423A-9DCB-D911EB86E87E[at]microsoft.com...
- quote -

"Cal Learner-- MVP" wrote:

- quote -

Thanks. Sent in an email I guess so we'll see if I hear back. I got Money
with TaxCut last year so I might be just under the 1 year deadline.

In microsoft.public.money, Mr B wrote:

- quote -

That would be a good idea.

If you purchased Money retail, I suggest you write down
your serial number, and contact Microsoft.
http://support.microsoft.com/money/ Enter the serial number as the
product ID.

- quote -

I have accounts at two banks and was trying to set them up in Money 2006 to
download automatically because they are both setup in the system.

Accounts at one bank works just fine as expected. This bank has a normal
signin process where I just log on with my username and passwords and that's
it.

The other bank, on their own website, has a 2 page login procedure with the
picture verification thing so I know I'm on the right site. Money can't log
in to this bank to get my account information. Does Money not support this
type of new login procedures or something? Do I need to let MS know that
this bank changed its login procedures so they can update something?

I'd really like to get this account to update automatically if I can.

Thanks for any help.