Tiny charges on bank cards could presage bigger problems

[brian.seel at gmail.com (Brian Seel)]

I know they dont store account information which was a major selling point
for me. They ask for your username and password to download the
transactions, but they dont store the u/p. They then get some token or
something that allows them to download the transactions again without asking
for your u/p again. You also cant move money between accounts... which made
me feel good enough about it to pull the trigger. Sure, if someone did get
in they would have a lot of information (like where I have accounts, and
information about me based on my spending), but nothing that would be too
detrimental.

Again, the benifits of knowing what is going on with my finances outweigh
the risk of that information getting out.

http://www.mint.com/privacy/

On Tue, Feb 3, 2009 at 18:00, Tim Mugherini <gbugbear at gmail.com> wrote:

> In all fairnees I did not add any account info
>
> Is there account info? Bank?account  number? Personal info?
>
> If it does not have account info - I seem to remember that was stored
> with another company or intermediate could that be targeted?
>
> On 2/3/09, xgermx <xgermx at gmail.com> wrote:
> > I've been using Mint for over a year w/o any issues. It's 'read only', so
> > even if the account was compromised there isn't much the attacker could
> do
> > except look at budgets and make some graphs/pie charts
> >
> > On Tue, Feb 3, 2009 at 4:11 PM, Mad Marv <marv at madmarvonline.com> wrote:
> >
> > > Interesting fraud tactic, brute forcing to find legitimate debit card
> > > numbers rather than having to steal the info.  Also mentions how
> > > Mint.com alerted affected members once they detected the anomoly.
> > > Anyone here use Mint?  I've always avoided them because their service
> > > seems like a big, fat bullseye.  Maybe there's some value to them?
> http://www.boston.com/business/articles/2009/02/01/tiny_charges_on_bank_cards_could_presage_bigger_problems/
> > > Marv
> > > _______________________________________________
> > > Pauldotcom mailing list
> > > Pauldotcom at mail.pauldotcom.com
> > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > Main Web Site: http://pauldotcom.com
>
> --
> Sent from my mobile device
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090203/a2a5890c/attachment.htm