Comments on: Wall Street Journal questions TreasuryDirect security

by: TreasuryDirect enhances security features: US Savings Bonds

Fri, 11 Aug 2006 16:36:31 +0000

There's a follow-up to this article today at TreasuryDirect enhances security features

by: Paul

Sat, 22 Jul 2006 17:33:12 +0000

If you select a beneficiary when you buy a bond at TD, there's a field for that person's social security number. Is that required? It's bad enough to put myself at risk for identity theft. I don't want to put my family also at risk.

by: Shorty

Wed, 19 Jul 2006 17:16:44 +0000

I don't know about they idea to ban "dummy" email accounts. For many people, a free web-based account is the only email account they have.

Myself, I have one "real" email account that I only give to personal friends. All online merchants and banks are given unique email accounts that are used only for communication with that merchant or bank.

This way, if any single email account is compromised, there is no effect on any of my other business.

by: Dan

Fri, 14 Jul 2006 17:47:11 +0000

Charles,

By "dummy" e-mail, I assume you mean free, web-based e-mail, right?

I'm not sure I agree with this suggestion. My free Hotmail account is the only one I've had uninterrupted for the last decade. I use it for any recipients outside of people I know personally, and try my best to only use my work e-mail for work purposes. I would bet that a very significant number (if not a majority) of Internet users use their free, web-based e-mail address almost exclusively.

by: bj

Wed, 12 Jul 2006 22:42:08 +0000

One thing they did right is to ask a security question before allowing to view/change your info. Since you rarely need to change this, there is little chance that a keylogger will capture it. BTW, use another (different) password as the answer to the question.

by: Charles

Wed, 12 Jul 2006 20:37:45 +0000

Personally, I feel like I have more security with my Yahoo account than TD Electronic.

I signed up for the electronic account some time ago and never used it for all of the above reasons.

To add to the discussion, they should:

- Allow a longer stronger user password.

- Not allow the use of dummy email addresses like Yahoo, Hotmail etc.

- Get rid of overly simplistic security questions anyone can know the answer to like "what's your mothers maiden name" etc.

-Provide users an "option" to permanently NOT ALLOW transfers to any bank except the original account without signed, bank notarized, ID proven written consent.