4 ms·

I'm not sure if you don't realize it but the entire purpose and key feature of Mint (and perhaps Wesabe as well, I've never tried it) is to aggregate all of you

I'm not sure if you don't realize it but the entire purpose and key feature of Mint (and perhaps Wesabe as well, I've never tried it) is to aggregate all of your banking information in one place. Of course to do so they need the credentials to your various accounts, as the banks don't offer any sort of open APIs or OpenID or anything like that. If you're not comfortable with this then of course the product is not for you. You can read more about Mint's claims of security and privacy at http://www.mint.com/privacy/ http://www.mint.com/privacy/

Swizec 16y ago
Yeah I honestly don't feel safe sharing that kind of info. I would much rather use my bank's "export data" feature once a week or so and uploading it there. Also, maybe my bank is weird, but how can Mint have access with just the user/pass combination? I can't do anything online without a RSA certificate ...
- brown9-2 16y ago
  I don't think it is public info how they accomplish it but it seems that they are simply scraping the site, for a good number of my personal accounts at least. Mint has me answer a number of the individual bank's "security questions" to be able to fully set up the bank account in Mint. If the bank changes the login procedure in anyway, then I have to re-edit the info about the bank that Mint has.
  - iampims 16y ago
    Mint uses Yodlee [1] for website scraping. Wesabe built their own and apparently inferior scraper, and this could be one of the reasons of why they lost to Mint.[2] [1] http://www.yodlee.com/ http://www.yodlee.com/ [2] http://blog.precipice.org/why-wesabe-lost-to-mint http://blog.precipice.org/why-wesabe-lost-to-mint
    - deleted 16y ago
      [deleted]
    - kaiserama 16y ago
      Apparently after being acquired by Intuit, Mint started using the Intuit aggregation framework. They seem to have made the transition fairly transparent as I had no idea it had switched.
      - stellar678 16y ago
        That's intriguing - I thought one of their privacy promises was that they don't hold on to the login information for your various accounts, that it lived with Yodlee. Seems like to do a transition they'd have to break that promise.
  - Swizec 16y ago
    Interesting. I thought my bank's security was lacking, but at least it is impossible to scrape my data off it even if I give you the password. You have to go through the browser's main security certificate thingy to "decode" the RSA key that is then sent to the bank. It's impossible to login without it or get to any sort of data (afaik)

Swizec 16y ago

Yeah I honestly don't feel safe sharing that kind of info. I would much rather use my bank's "export data" feature once a week or so and uploading it there. Also, maybe my bank is weird, but how can Mint have access with just the user/pass combination? I can't do anything online without a RSA certificate ...

brown9-2 16y ago
I don't think it is public info how they accomplish it but it seems that they are simply scraping the site, for a good number of my personal accounts at least. Mint has me answer a number of the individual bank's "security questions" to be able to fully set up the bank account in Mint. If the bank changes the login procedure in anyway, then I have to re-edit the info about the bank that Mint has.
- iampims 16y ago
  Mint uses Yodlee [1] for website scraping. Wesabe built their own and apparently inferior scraper, and this could be one of the reasons of why they lost to Mint.[2] [1] http://www.yodlee.com/ http://www.yodlee.com/ [2] http://blog.precipice.org/why-wesabe-lost-to-mint http://blog.precipice.org/why-wesabe-lost-to-mint
  - deleted 16y ago
    [deleted]
  - kaiserama 16y ago
    Apparently after being acquired by Intuit, Mint started using the Intuit aggregation framework. They seem to have made the transition fairly transparent as I had no idea it had switched.
    - stellar678 16y ago
      That's intriguing - I thought one of their privacy promises was that they don't hold on to the login information for your various accounts, that it lived with Yodlee. Seems like to do a transition they'd have to break that promise.
- Swizec 16y ago
  Interesting. I thought my bank's security was lacking, but at least it is impossible to scrape my data off it even if I give you the password. You have to go through the browser's main security certificate thingy to "decode" the RSA key that is then sent to the bank. It's impossible to login without it or get to any sort of data (afaik)