• Page :
  • 1
  • Text Only

Tonight's 60 Minutes has been covering the vulnerability of online bank infrastructure and a monetary system that relies so heavily on bank records rather than real assets. They were suggesting that a cyber-attack may not result in the theft of money, but rather the destruction of records and thus a disappearance of money.

I use Yodlee to keep track of all of my bank accounts, savings, brokerage accounts, etc. I'm certain the probability of an attack is very low, but I'm also not that concerned because I don't have much $$ to lose. I only have about $30k in liquid assets and my mortgage brings my net worth into the red. In the rare event that I was wiped out by some sort of security breech, I could recover fairly easily. Portals like Yodlee would appear to really open yourself up for an exposure...even if the odds are slim.

I was wondering if any FWF members used online banking services or Yodlee with much higher net worth. If so, how much $$ are we talking about. At what point, if ever, is the convenience of online banking (and/or services like Mint and Yodlee) to risky?

I look forward to everyone's opinion.



nothingevertodo said: Portals like Yodlee would appear to really open yourself up for an exposure...even if the odds are slim.

I was wondering if any FWF members used online banking services or Yodlee with much higher net worth. If so, how much $$ are we talking about. At what point, if ever, is the convenience of online banking (and/or services like Mint and Yodlee) to risky?

I look forward to everyone's opinion.

The fact you use online banking would not matter in the event of a cyber-attack that destroyed records


RS4Rings said: The fact you use online banking would not matter in the event of a cyber-attack that destroyed records

Two Scenarios...

1.) You have 10 banks accounts that have no connection to one another (IE: no common electronic banking login, no aggregating service like Yodlee) and one is attacked/destroyed. The other 9 accounts would seem relatively safe.

vs.

2.) If you have 10 bank accounts sharing identical username and passwords as well as a service like Yodlee and one is attacked/destroyed, your other 9 accounts seem to be much more exposed.

It is like keying all of your locks (house, work, car, etc) the same vs. using unique keys and keeping them in different places. Am I way off-base here?

I'm really more interested in discussion about those on FWF that have high net worth and if they have concerns about the security. I'm not the paranoid type but with banking services feeling so connected, email history and shared-password usage so common, and the more prevalent use of portable devices to access banking info, it seems like those with a lot to lose would want to be more cautious.


nothingevertodo said:

It is like keying all of your locks (house, work, car, etc) the same vs. using unique keys and keeping them in different places. Am I way off-base here?

Yes

nothingevertodo said:
I'm really more interested in discussion about those on FWF that have high net worth and if they have concerns about the security. I'm not the paranoid type but with banking services feeling so connected, email history and shared-password usage so common, and the more prevalent use of portable devices to access banking info, it seems like those with a lot to lose would want to be more cautious.

Even if someone hacked your accounts they could not destroy the banks records. I have no Idea where you are going with this


Mint.com would seem to protect you more than anything. If any of your individual accounts is compromised, Mint.com's replication of that account's data could serve as evidence supporting the victim. Besides, Mint only maintains a read-only relationship with each account. I know nothing of Yodlee, but this threat seems to be, if anything, mitigated by Mint.


juiceFromGaf said: I know nothing of Yodlee, but this threat seems to be, if anything, mitigated by Mint.

Long answer in short - Mint.com is powered by Yodlee.


nothingevertodo said: 1.) You have 10 banks accounts that have no connection to one another (IE: no common electronic banking login, no aggregating service like Yodlee) and one is attacked/destroyed. The other 9 accounts would seem relatively safe.

But you won't find out something is wrong in that one account out of 10 until you reconcile those accounts, and without some kind of automated aggregation, you aren't likely to be doing that more than once a month.


jburger said: nothingevertodo said: 1.) You have 10 banks accounts that have no connection to one another (IE: no common electronic banking login, no aggregating service like Yodlee) and one is attacked/destroyed. The other 9 accounts would seem relatively safe.

But you won't find out something is wrong in that one account out of 10 until you reconcile those accounts, and without some kind of automated aggregation, you aren't likely to be doing that more than once a month.

a big benefit of yodlee is that you can see all transactions for your accts each day in one place. so if anything hapopens in any accout you will know about it right away.

also, banks send emails when anything important is changed on yr acct: like setting up a new payee. so you will know about that too. i think the risks of problems are far outweighted by the convenince and the ability to easily monitor your accts.


Is OP talking about a scenario like die hard 4? then it will be tangible record vs online statement


zmre2b9 said: jburger said: nothingevertodo said: 1.) You have 10 banks accounts that have no connection to one another (IE: no common electronic banking login, no aggregating service like Yodlee) and one is attacked/destroyed. The other 9 accounts would seem relatively safe.

But you won't find out something is wrong in that one account out of 10 until you reconcile those accounts, and without some kind of automated aggregation, you aren't likely to be doing that more than once a month.


a big benefit of yodlee is that you can see all transactions for your accts each day in one place. so if anything hapopens in any accout you will know about it right away.

also, banks send emails when anything important is changed on yr acct: like setting up a new payee. so you will know about that too. i think the risks of problems are far outweighted by the convenince and the ability to easily monitor your accts.

Even better feature (but kinda not very used yet) of Yodlee is, Financial Calendar - it plots your expenses right on full window calendar - much faster to glance over month's expenses than scrolling through list of transactions.


Bank databases are backed up quite often and have backup servers that are capable of completely replacing the current server. I'm not saying it's impossible to wipe out all financial records at a bank, but it is HIGHLY unlikely and not nearly as easy as implied.

Several things would have to happen:
1. Knocking out the primary database
2. Knocking out the backup database (at least 2)
3. Knock out the backup library that is constantly backing up the data.
4. Destroy all the tapes and other backup media that the backup library produces.

Like I said, no impossible, but quite hard. In fact, it is FAR easier to burn down a bank with all paper records than it is to destroy all virtual records. Also, almost all banks have their backup servers in a different location than their primary server so that a fire won't take the bank down for good.


dawhim said: Is OP talking about a scenario like die hard 4?

No, this was the plot to Fight Club.


Who cares about some bank accounts? How about a hack of the county clerk's computer and creatively modifying the deeds?
I don't think many people keep their deed well filed.


Who cares about county clerk computers? How about dumpster diving for pay stubs?
I don't think many people keep their garbage well protected.


sxn said: Who cares about county clerk computers? How about dumpster diving for pay stubs?
I don't think many people keep their garbage well protected.

Who cares about pay stubs? How about wreck diving for sunken treasure?
I don't think many people keep their pirate gold well protected.


One significant threat I would worry about with aggregate sites like Yodlee would be an inside job rather than somebody hacking in from the outside. One disgruntled yodlee employee could do FAR more damage than 1,000 expert hackers from the outside.




Disclaimer: By providing links to other sites, FatWallet.com does not guarantee, approve or endorse the information or products available at these sites, nor does a link indicate any association with or endorsement by the linked site to FatWallet.com.


While FatWallet makes every effort to post correct information, offers are subject to change without notice.
Some exclusions may apply based upon merchant policies.
© 1999-2012