Chumly
 
Reply Sat 7 May, 2011 10:21 am
Is it I wonder...given they ask for a plethora of account numbers etc?
  • Topic Stats
  • Top Replies
  • Link to this Topic
Type: Question • Score: 0 • Views: 1,478 • Replies: 4
No top replies

 
tsarstepan
 
  2  
Reply Sat 7 May, 2011 11:49 am
@Chumly,
I've heard only one tech expert talk about mint.com. Leo Laporte and that was about a couple of years ago.

He gave it a positive review back then but then again like I said that was a couple of year's ago.

Here is a 2007 review on the site's security practices (reasonably reliable source lifehacker.com): http://lifehacker.com/312083/is-mint-ready-for-your-money

Here is a 2010 article from a security expert (exhacker?) but I can't vouch for his expertise though the article seems credible in its own right:
http://www.jasonowens.com/how-i-would-try-to-hack-your-mint-account/
Quote:
Brute forcing the password is one way, but a bit ham-fisted. There is no account lockout or notification of failed attempts.

AKA, mint.com doesn't punish/block hackers trying an unlimited combination of passwords if they are trying to attempt an illicit invasion of your account.

STRONG PASSWORDS (weird combinations of numbers and letters or esoteric foreign words and number combinations are a must!!)

Be wary of logging on in public spaces with public Wifi. Especially if the transmissions aren't encrypted.
Quote:
How to Protect Your Mint.com Account from Brute Force Attacks
Don’t use your regular email address, setup one specifically for Mint.com (you could have it forward to your real address so you still get notifications)
Make your new email address random so it’s difficult to guess.
Use a strong password
Change your password [on a regular basis]


Finally: Another 2010 article from a source I never heard of before...http://moneyning.com/money-management/how-safe-is-mint-com-the-security-questions-worth-considering/

Quote:
Computer and Physical Security

To protect information, Mint uses 128-bit SSL encryption. This cryptographic protocols is considered standard for online banking and other transactions that include sensitive information. It is designed to prevent eavesdropping and tampering. Seeing that a tool uses 128-bit SSL encryption is typically a good indicator that the web application in question takes your information’s security seriously. Mint also routinely tests the various parts of its website in order to ensure that everything continues to work properly.

Mint also has physical security measures in place, preventing unauthorized access to the servers where your information is saved. That additional step means that even disgruntled employees will have a hard time misusing information.

Is It Enough?

Mint.com’s security measures are on par with those many banks take. It’s a system that does secure your information very well.


0 Replies
 
Chumly
 
  1  
Reply Sun 8 May, 2011 09:01 am
Yeah I read a goodly scrap before posting the question, yet a definitive answer seems elusive, except to say that the rewards of a web-based budget generator that needs your account numbers does not seem to be worth the risks.

The argument that it's as good as a banks reminds me of the logical fallacy argumentum ad populum.
tsarstepan
 
  1  
Reply Sun 8 May, 2011 10:04 am
@Chumly,
I'm happy doing my online banking merely with the bank itself instead of a third party (one party too many in this equation).

Of course the very nature of online banking and finance management will always be done with a certain amount of risk. Caveat emptor of course!
0 Replies
 
Bella Dea
 
  1  
Reply Tue 10 May, 2011 09:53 am
Honestly, done the third party thing and it's not worth the time, IMO. Too much hassle. But that was just me.

And I think it's safe.
0 Replies
 
 

Related Topics

So I just joined Facebook.... - Discussion by DrewDad
YouTube Is Doomed - Discussion by Shapeless
Internet disinformation overload - Discussion by rosborne979
Participatory Democracy Online - Discussion by wandeljw
OpenDNS and net neutrality - Question by Butrflynet
Internet Explorer 8? - Question by Pitter
 
  1. Forums
  2. » Mint.com safe?
Copyright © 2014 MadLab, LLC :: Terms of Service :: Privacy Policy :: Page generated in 0.23 seconds on 10/20/2014 at 02:06:52