Quantcast
Today @ PC World
News, opinion, and links from the PC World staff.

Microsoft Money Glitch Fixed

Posted by Peggy Watt | Friday, July 30, 2004 2:30 PM PT

Here's an update from PC World Contributing Editor Stuart J. Johnston to PC World's recent report about some Microsoft Money 2004 users being denied access to their own financial records because of a software glitch:

As promised, Microsoft posted a patch early this morning for some Money 2004 users who were inadvertently locked out of their financial data, even though it was stored on their local hard disks. Affected users can use a Money Key Wizard on the MSN Money site. Users issued a collective sigh of relief after nearly a week of being unable to access their financial information.

"It was a very easy fix from the users point of view. All we had to do was click a link on a Web page to a "Money Key Wizard", the next screen we got was telling use that we could now logon to our files and see all our information," says Kenneth T. Van Wie II, an Atlanta computer consultant who finally became so frustrated that he complained to PC World after the problem persisted for several days. Microsoft caused the problem by making changes to a server or servers on Sunday night, July 25, or early Monday. The problem created a disconnect between Microsoft's Passport authentication technology and Money's file encryption keys. Microsoft insists the glitch is not in Passport, which continued to work for other services such as Hotmail.

Money 2004 users who use any of the program's online options, such as bill pay and e-banking, got an error message if they tried to log into their accounts from Monday afternoon until Tuesday morning. The message said their sign-in names were incorrect or not recognized. Subsequently, they were locked out of their data for the rest of the week, until Microsoft was able to implement a patch.

There never was a question that Microsoft was serious about fixing the problem as quickly as possible, notes Rob Enderle, principal analyst at technology consulting firm The Enderle Group. But Microsoft's poor handling of the situation initially created a small public relations nightmare. The company did not immediately publicly notify customers of the situation, and then tried to put a spin on it by pointing out the "good news" that nobody--including customers--could get break into the financial data. "When you?ve got millions of people using your financial program, it only takes a few to create a bad impression of the product," Enderle says.

Click here to go to the Today@PC World main page and more blog entries.
Comments (3)

Get used to it, Microsoft users.
It has been reported that Longhorn's new database-backed filesystem will operate precisely the same way. All data on your local hard drive is encrypted, with Microsoft controlling the keys.
This way, they can impose and enforce a subscription license scheme (instead of the current pay-once, use as long as it works for you) and if you don't pay the recurring license fees (or a Microsoft server error like this is repeated) you lose all access to YOUR data on YOUR hardware.

This "feature" in Money they say is to provide this extra security "benefit" to customers is really a proof-of-concept dry-run exercise for Microsoft's engineers to help them fine-tune the feature for Longhorn. Why else would they keep the only key? Money users want to keep other people out of their files, they don't want to keep themselves out. If the key were stored in a password-protected local file instead of (or in addition to) a password-protected remote Passport server, the user would have the same level of security, without having to worry about key availability.

If you're looking for an open, free alternative to Money that won't lock your information away from you without giving YOU the key, try GnuCash.

Scott
July 31, 2004
11:10 AM PT

I Suffered from this MS Money affliction and I went nuts wondering what I did wrong. In fact I didn?t even realize it wasn?t something I did, until I just read the PC World article. I even reset my passport password.

Luckily I sync. my laptop with my desktop, so I removed my wireless card, from my laptop, thus disabling internet access, and checked the box for not using online service and hey presto!. This couldn't work on my desktop, because once an unsuccessful attempt to sign in had been made it seems like the whole file was locked, online services subsequently desired or not. I overwrote my desktop Money file with my laptop version.

Moral: I will never, ever trust my hard drive files to the integrity of servers thousands of miles away. Moreover I will certainly not ever perpetrate such foolishness with a company named Microsoft. I hope someone files suit against them for this.

Mambu Kawa
August 01, 2004
6:36 AM PT

ISPENT 2 1/2 HOURS TRYING TO LOG ON TO THE INFO YESTERDAY.I DECIDED THAT I WAS AN IDIOT AND GAVE UP

MIKE D
August 01, 2004
5:25 PM PT