Many thanks Bob & Dick!

"Bob Peel, MVP" <bob_peel[at]kiandra.freeserve.co.uk.INVALID> wrote in message
news:uWWNDvC%23HHA.748[at]TK2MSFTNGP04.phx.gbl...
- quote -

Most any application that is widely used to deal with files obtained from
wherever expose things like buffer overruns. Money, OTOH, isn't widely used
to open files that show up in email or are found on uncontrolled websites
setup by unknown persons. (People are distributing malware in .PDF and
various media files targeted at exposures in popular apps like QuickTime and
MediaPlayer.) Those apps that also run with elevated privilege are the most
serious risk.

The other secret is popularity of the target for malware/exploit. MacOS
isn't widely targeted because next to nobody uses it. The same problem would
tend to steer the malware producers away from targeting Money.

"Bob Peel, MVP" <bob_peel[at]kiandra.freeserve.co.uk.INVALID> wrote in message
news:uWWNDvC%23HHA.748[at]TK2MSFTNGP04.phx.gbl...
- quote -

To be fair nor do many other applications (if any!).

--
Regards
Bob Peel,
Microsoft MVP - Money

For UK tips & fixes see
http://support.microsoft.com/default...d=fh;EN-GB;mny.


I do not respond to any emails that I have not specifically asked for.

"Dick Watson" <littlegreengecko[at]mind-enufalready-spring.com> wrote in
message news:eJsTeQ89HHA.4880[at]TK2MSFTNGP03.phx.gbl...
- quote -

My point exactly. Money, by itself, does little to enforce and or expose you
from a security standpoint.

"rustyfender04" <rustyfender1[at]hotmail.com> wrote in message
news:O9ZwON79HHA.1484[at]TK2MSFTNGP06.phx.gbl...
- quote -

So I guess that real security lies with having up to date anti-virus
protection, a good firewall...and a few programs like Spybot, AdAware,
Spyware blaster and WinPatrol (To name a few)?

As well as keeping up to date with Windows updates, etc.


"Dick Watson" <littlegreengecko[at]mind-enufalready-spring.com> wrote in
message news:ew35yiT9HHA.3716[at]TK2MSFTNGP03.phx.gbl...
- quote -

I wouldn't say that as I don't know.

What I would say is that neither of them make, of themselves, much of a
contribution to increasing your computer and information security nor do
they pose much vulnerability exposure. It's kinda like asking whether the
Paint application in Vista is more or less secure than the Paint application
in Windows 95. Just because you use them to create data files with
information you want to protect doesn't mean that either of them have much
of an impact on your computer and information security.

"rustyfender04" <rustyfender1[at]hotmail.com> wrote in message
news:OGYfVCP9HHA.2752[at]TK2MSFTNGP06.phx.gbl...
- quote -

So I guess Mny '04 is as secure as Mny '07 then?

"Dick Watson" <littlegreengecko[at]mind-enufalready-spring.com> wrote in
message news:empIbOC9HHA.1212[at]TK2MSFTNGP05.phx.gbl...
- quote -

I was just wondering why you were expecting updates to Money code driven by
security when its contribution to security is so small--i.e., it's
vulnerable exposure is almost non-existent.

The Money updates are mostly, I believe, the mapping info for FIs to service
providers for getting data from that FI.

"rustyfender04" <rustyfender1[at]hotmail.com> wrote in message
news:uQQpd7A9HHA.3400[at]TK2MSFTNGP03.phx.gbl...
- quote -

I was just concerned--since I am using Mny '04, and I know that they stopped
supporting the software after the end of 2006.

Just what does a person download in a Mny update anyway (besides online
quotes, etc.)? (I'm not talking about a file download from a bank here
either.)

"Dick Watson" <littlegreengecko[at]mind-enufalready-spring.com> wrote in
message news:%23hTWVsz8HHA.5316[at]TK2MSFTNGP04.phx.gbl...
- quote -

Yes, Money files contain sensitive data. But the operating system and the
user are 99.5 % of the pathway to get that data exposed.

In Money, per se, about the only external threat is somebody exploiting,
say, problems in the OFX or QIF handlers and hoping you will download an
appropriately malformed data file. Given how few users there are and the
reduced fraction that downloads data and the fact that most of those
download if from not just any old site, it seems like a tough place to have
much fun if that's what you are into. That having been said, I'm sure if you
are aware of some exploit they'd be glad to hear about it and might even
care. Whether they'd patch it is an all together different question.

"rustyfender04" <rustyfender1[at]hotmail.com> wrote in message
news:%232WFhUz8HHA.4880[at]TK2MSFTNGP03.phx.gbl...
- quote -

I presume that MS would release security updates for Mny products...Just
like they do for Windows & Office since Mny files contain sensitive
information.

Sounds logical to me anyway.

"Cal Learner-- MVP" <via_newsgroup[at]please.tnx> wrote in message
news:ff26e3d2bjkhbqlckvhr1d2u144e00r4ga[at]4ax.com...
- quote -

I'm not sure they ever released even one code update for M04, security or
otherwise. They now have expired online updates for all M04--this is
probably an indicator about how eager they are to deal with it in any way.

By "security updates" are you meaning market quotes? Gone as of 9/2/07 as
described in the EULA and/or Online Services Policy.

- quote -

In microsoft.public.money, rustyfender04 wrote:

- quote -

Anyone?


"rustyfender04" <rustyfender1[at]hotmail.com> wrote in message
news:ecWtgoD8HHA.4436[at]TK2MSFTNGP03.phx.gbl...
- quote -

Hi all,

I am using Mny 2004 for my financial needs (Which suits me fine), but I was
wondering if Microsoft had ceased to release security updates for this
product?