Off topic- Intuit logging in to my bank account?- Conclusion (I

[Nigel Stapley]

I'm sure you don't want to drag this thread out much longer = but just
a thought from the UK. I use Barclays Bank, which has two ways to
access my account: Basic Access to do low level activities - view my
account, download data and PinSentry which enables me to do
everything. I have used auto-login with Moneydashboard to download my
transactions. This uses Basic Access to gain the information. There is
no information in common between the two means of access. If I were to
forget I had a Moneydashboard account (which I may do since I no
longer use it!!), or perhaps if it failed to close correctly the
auto-login would continue to log-in, presumably  indefinitely.

The fact that your account is being logged into so regularly suggests
it is an auto-login. The fact changing your password doesn't prevent
it suggests it is using another method. I cannot believe that your
bank would allow an auto-login full access to your account. Perhaps
there is simply an alternative method of logging in you set up but
have forgotten or overlooked?

Nigel

On Fri, Oct 7, 2011 at 12:23 AM, Robert Heller <heller at deepsoft.com> wrote:
> At Fri, 7 Oct 2011 00:04 +0100 (BST) gnucash at double-bars.net wrote:
>
>>
>>
>>
>> > Do these third-party on-line banking services know more about what
>> > is going on? One would really hope so -- the *bank* *customer server*
>> > people, who are more likely to know about *banking* issues (eg where
>> > is my money? What is today's interest rate? etc.), would not be
>> > likely to know geeky advanced IT stuff, like IP addresses or
>> > anything about RSA encryption, and such like.
>>
>> The trouble is that you have a contractual relationship with your
>> bank, but not with the those who provide services to your bank.  It is
>> therefore not your place to go interrogating such providers, whereas it
>> is the bank's duty to ensure that it's providers behave in accordance
>> with the law, and the bank's customer T&Cs.  If you escalate your
>> complaint within the bank you are likely to get some sensible answer,
>> because the responses you have had so far are simply not credible.
>
> This is true.  OTOH, one can use various available tools, like whois,
> google, etc. to find various sorts of *public* information about the
> third-party on-line banking service(s), include what relationship (if
> any) said services have with Intuit.
>
> Also, the use of a third-party on-line banking service would explain
> why the bank(s) would not be able to provide information like the IP
> addresses -- the *bank's* customer service people would just not have
> that info, but the third-party on-line banking service would, and if
> the FBI or other Law Enforcement or Court or whatever demanded the
> info, there would probably be a lawyer-dance (bank lawyers talking to
> third-party on-line banking service lawyers) process involved in
> getting the info.  Which is exactly what bank #2 customer service
> people said, in a round about customer service speak way.  It also
> explains bank #3 customer service people having no clue about things
> like IP numbers (which says various things about bank #3 customer
> service department).
>
>>
>> Colin
>>
>>
>
> --
> Robert Heller             -- 978-544-6933 / heller at deepsoft.com
> Deepwoods Software        -- http://www.deepsoft.com/
> ()  ascii ribbon campaign -- against html e-mail
> /\  www.asciiribbon.org   -- against proprietary attachments
>
>
>
> _______________________________________________
> gnucash-user mailing list
> gnucash-user at gnucash.org
> https://lists.gnucash.org/mailman/listinfo/gnucash-user
> -----
> Please remember to CC this list on all your replies.
> You can do this by using Reply-To-List or Reply-All.
>