<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Safe Online Financial Accounts</title>
	<atom:link href="http://www.charlesmerriam.com/blog/2008/05/safe-online-financial-accounts/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.charlesmerriam.com/blog/2008/05/safe-online-financial-accounts/</link>
	<description>Charles Merriam&#039;s loud tales of coding and technology</description>
	<lastBuildDate>Sun, 02 May 2010 17:08:03 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
	<item>
		<title>By: charles</title>
		<link>http://www.charlesmerriam.com/blog/2008/05/safe-online-financial-accounts/comment-page-1/#comment-14149</link>
		<dc:creator>charles</dc:creator>
		<pubDate>Fri, 02 May 2008 00:33:36 +0000</pubDate>
		<guid isPermaLink="false">http://www.charlesmerriam.com/blog/?p=130#comment-14149</guid>
		<description>Hi Micheal, 

I agree with you that it&#039;s up to each user to figure out what the comfort zone.  I spent a comical half hour recently with another large brokerage/financial house trying to guess what my password was when I last touched the online access to the account in 2005.  I needed to transfer over an old account which I last touched in 2001.   

The usual worry is that this sequence usually transfers money if the computer or upstream has been compromised:
1.  Change the mailing address.  Block delivery of email confirmations to changes.
2.  Wait 15 days of lock-out period.
3.  Request a reset of the PIN and paperwork system.  Fill in more paperwork.  Wait.
4.  Transfer money out.

Because the user is ultimately on the hook for the loss, the user must be in control.</description>
		<content:encoded><![CDATA[<p>Hi Micheal, </p>
<p>I agree with you that it&#8217;s up to each user to figure out what the comfort zone.  I spent a comical half hour recently with another large brokerage/financial house trying to guess what my password was when I last touched the online access to the account in 2005.  I needed to transfer over an old account which I last touched in 2001.   </p>
<p>The usual worry is that this sequence usually transfers money if the computer or upstream has been compromised:<br />
1.  Change the mailing address.  Block delivery of email confirmations to changes.<br />
2.  Wait 15 days of lock-out period.<br />
3.  Request a reset of the PIN and paperwork system.  Fill in more paperwork.  Wait.<br />
4.  Transfer money out.</p>
<p>Because the user is ultimately on the hook for the loss, the user must be in control.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Michael C. Berch</title>
		<link>http://www.charlesmerriam.com/blog/2008/05/safe-online-financial-accounts/comment-page-1/#comment-14145</link>
		<dc:creator>Michael C. Berch</dc:creator>
		<pubDate>Thu, 01 May 2008 23:42:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.charlesmerriam.com/blog/?p=130#comment-14145</guid>
		<description>(Sorry, in the above, I should point out that I meant &quot;requires additional paperwork and proof of identity&quot; to set up, not for every instance of use.)</description>
		<content:encoded><![CDATA[<p>(Sorry, in the above, I should point out that I meant &#8220;requires additional paperwork and proof of identity&#8221; to set up, not for every instance of use.)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Michael C. Berch</title>
		<link>http://www.charlesmerriam.com/blog/2008/05/safe-online-financial-accounts/comment-page-1/#comment-14144</link>
		<dc:creator>Michael C. Berch</dc:creator>
		<pubDate>Thu, 01 May 2008 23:40:59 +0000</pubDate>
		<guid isPermaLink="false">http://www.charlesmerriam.com/blog/?p=130#comment-14144</guid>
		<description>This is what Charles Schwab does by default. You can trade stocks, mutual funds, look at balances and positions, etc., but transferring money to an outside account, or having a check sent, requires additional paperwork and proof of identity. Works for me. 

Unlike Judith, I prefer full online access to my account, and would change brokers if they didn&#039;t make it available. I don&#039;t see a telephone call (with, presumably, a PIN for authentication) as more secure than SSL over the public Internet.</description>
		<content:encoded><![CDATA[<p>This is what Charles Schwab does by default. You can trade stocks, mutual funds, look at balances and positions, etc., but transferring money to an outside account, or having a check sent, requires additional paperwork and proof of identity. Works for me. </p>
<p>Unlike Judith, I prefer full online access to my account, and would change brokers if they didn&#8217;t make it available. I don&#8217;t see a telephone call (with, presumably, a PIN for authentication) as more secure than SSL over the public Internet.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Judith</title>
		<link>http://www.charlesmerriam.com/blog/2008/05/safe-online-financial-accounts/comment-page-1/#comment-14137</link>
		<dc:creator>Judith</dc:creator>
		<pubDate>Thu, 01 May 2008 21:07:49 +0000</pubDate>
		<guid isPermaLink="false">http://www.charlesmerriam.com/blog/?p=130#comment-14137</guid>
		<description>I&#039;m OK with merely seeing the data online, and requiring a phone call even for transferring between mutual funds.</description>
		<content:encoded><![CDATA[<p>I&#8217;m OK with merely seeing the data online, and requiring a phone call even for transferring between mutual funds.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
