Goodbye, Chrome: Google’s web browser has become spy software
2 Likes
I’m a Firefox user, but that article isn’t honest. The automatic tracker blocking is a relatively new feature in Firefox. Someone who is serious about privacy would have proper ad- and tracker-blocking extensions in either browser.
2 Likes
I decided to try personal capital. I have been using Mint.com for years. The 2 are similar, so it took a couple days to input all my accounts.
Do you know of any way to print out a copy of all the data collected? I’ve been checking out their information & it doesn’t seem to. Looks like you can print each account but not the whole thing.
I don’t usually print reports outside of a few snapshots of retirement planner but I know that they don’t have a good way to print out reports, the way Quicken does. The web version allows you to export transactions in a CSV file, then I guess you could import or print it from another app.
You could also print the reports to PDF using your browser print function. The formatting may not stay as clean but that’s what I usually use and it turns out ok for my limited needs.
2 Likes
Interesting article on crooks leveraging financial aggregation site to see if your leaked password works elsewhere.
My password has been comprised by past breaches, I know that but I was still surprised that one of my more secure password I only use for banking is also out there after receiving one of the those “I know your password so pay me $$$ in bitcoin” email. I do have 2FA at most sites but still that’s not a good feeling since I thought most banks encrypt login/pw.
2 Likes
Are you sure it wasn’t spam?
And the gist of the article isn’t anything new – don’t reuse passwords! Even better, don’t reuse logins or email addresses!
1 Like
If you’re not familiar with these emails, they typically claim that they’ve hacked your system when you visited an adult site and captured embarrassing videos from your webcam. Their “proof” is your email address and password in plaintext. They threaten to send the video to all of your contacts unless you pay them in bitcoin.
Of course it’s spam, but the fact that the password is there means it’s been compromised somehow.
The best way to tell if your credentials are out there is haveibeenpwned.com, which will tell you which known breaches have released your information. Very helpful and informative.
2 Likes
Good summary! I have seen 2 flavors of this though. I think @scripta is referring to the spam flavor which does not include your password (or any password) at all. The second flavor does show a passsword which I assume is garnered through other means (breaches, passwords being sold etc).
1 Like
It is spam, I was just surprised that it’s one of my more secure password which I had assumed that I only used with banking site that encrypted such things.
Right. I didn’t even know there was a flavor with a password included. That’s pretty stupid though unless they manage to change your password and hold your account hostage. Otherwise you could just change the password yourself…
Which bank? Or did you reuse the password at multiple banks? If there’s no known hack of that bank, are you sure your devices aren’t compromised?
1 Like
I think the point is ‘I was able to hack your password, so you better take my threats seriously.’
1 Like
Quite a few, actually. Yes, not the way to do things.
As for my devices, I’m quite sure but nothing is ever 100%. It was in one of those big breach database.
I’m totally done with Mint. Site is way too slow and has too many technical issues. What finally did it was not downloading AU transactions on my Amex card and the chat rep having a great deal of difficulty understanding the issue.
I tried Personal Capital, but it lacks budgeting features.
I just started using Count About, which is a paid service. I love how fast it is. The UI is clunky and the budgeting features are immature, but they’ve got an active suggestions forum and there are many other former Mint users on there, so I’m hopeful it’ll get better.
I don’t ever use the Mint website. I use the Mint app to check my transactions and it’s been good enough.
Used to use Yodlee (via Labs beta portal) until they shut it down, now I use Fidelity Full View for everything. It has quirks but generally works well enough.
1 Like
TL; DR - some app called “Spendee” 
Although not a direct hack via account management apps, it does show how they can be used and affected.
2 Likes