Egg's Money Manager

Badger_Lady

I love Egg Money Manager - totally rely on it to check all my accounts.

The only problem is that it doesn't seem quite compatible with the new Barclays PIN Sentry thingy - I still login to Egg regularly but my main current account is now a mystery until I get my paper statements (more a Barclays problem than an Egg one).

chesky369

"As far as I'm aware, it's a pretty secure way of doing it"

Not necessarily - mine was breached; luckily I realised but had a very nasty period, getting in to change ALL my passwords in a real hurry. My banks were less than sympathetic when I reported it (just to be on the safe-side). More than one said 'we really don't recommend its use because of security issues'.

I haven't used it since.

aleph_0

chesky369 wrote: »

"As far as I'm aware, it's a pretty secure way of doing it"

Not necessarily - mine was breached; luckily I realised but had a very nasty period, getting in to change ALL my passwords in a real hurry. My banks were less than sympathetic when I reported it (just to be on the safe-side). More than one said 'we really don't recommend its use because of security issues'.

I haven't used it since.

How exactly was it breached. You would have had to have provided your Egg Money Manager Password, and the keys stored on your computer as far as I can tell.

It is pretty secure, assuming Egg are telling the truth. That is, they *say* that they leave your information on your computer, and use your password to get the key from their servers to decrypt on your computer, before your computer sends the details to your banks website, but in reality there is nothing stopping them from getting a copy of your banking details (I suppose you could given enough effort do some checking of this).

One thing that is true is that the Egg system can be made to appear to your bank no different from a human visitor, so your bank would have difficult trying to identify that you are using it.

Personally I don't trust the 3rd party to not perform an attack now or in future, and so go direct.

aleph_0

Ah, I assume this is what you were referring to:
http://forums.moneysavingexpert.com/showthread.html?t=435772&highlight=egg

I'm not convinced that you were actually phished (if that is the correct URL you posted in the previous thread and it was an attack, they appeared to be taking advantage of a weakness in egg's website caused by silly programming which appears to be fixed now), but that isn't something that is worth dwelling on.

The moral is, remember that anyone can send an e-mail claiming to be from anybody. More usefully, if you decide to put security to a single point of failure, remember to keep that point secure. :P

mrseyes

I also love Egg Money Manager but they do not have M&S and BM.

Badger_Lady

^ Have you suggested it to them? They've got an online form where you can submit organisations, and they'll bully them into joining if there's enough demand

jonathon_hart

I had an M&S credit card that I could see on there - I had to e-mail them to get it added though. I have done this twice (they also missed National Savings & Investments) and both times they were added within a week or so.

Jonathon

CHR15

@chesky
Blaming Egg when the fault was solely down to you isn't right.

Phishing scams have been around for a long time now, anyone other than a novice to PC's/ internet etc really shouldn't be foolish enough to be suckered into throwing their security details away.

I like Egg Money Manager but like has been posted, they do their maintenance at awkward times (although it is more awkward for me personally than a fault with Egg, they do have to do it sometime!)

And they don't support Kaupthing, I have requested it and I hope everyone else who uses them both do too. The more requests they get, the more chance of it being supported.

KeithEssex_2

CHR15 wrote: »

@chesky
Blaming Egg when the fault was solely down to you isn't right.

Phishing scams have been around for a long time now, anyone other than a novice to PC's/ internet etc really shouldn't be foolish enough to be suckered into throwing their security details away.

I like Egg Money Manager but like has been posted, they do their maintenance at awkward times (although it is more awkward for me personally than a fault with Egg, they do have to do it sometime!)

And they don't support Kaupthing, I have requested it and I hope everyone else who uses them both do too. The more requests they get, the more chance of it being supported.

I've emailed them re: Kaupthing (and BM). Haven't had a reply yet but will post it when I do.

aleph_0

CHR15 wrote: »

@chesky
Blaming Egg when the fault was solely down to you isn't right.

Although it may be chesky fault that they fell for the phishing scam, it does demonstrate that if you allow there to be a single point of failure (although I doubt that there was actually a problem in this case, presumably if it was a phishing site it would be on a different domain, and it couldn't get at the encrypted data on the computer?). That is argubly a potential weakness with Egg.