Is your online bank account safe?

A recent report by researchers at the University of Michigan demonstrates that bank & brokerage websites are plagued by security flaws. These widespread design flaws make it easier for accounts to be compromised. According to Finextra, an examination of 214 bank websites revealed that more than 75% have cracks in security that hackers could exploit to access customer information and accounts.

‘Says Atul Prakash, professor in the department of electrical engineering and computer science: "To our surprise, design flaws that could compromise security were widespread and included some of the largest banks in the country. Our focus was on users who try to be careful, but unfortunately some bank sites make it hard for customers to make the right security decisions when doing online banking."’

This should be a cause for concern for all banking customers, the prospect of going online and finding your account cleared out is a nightmare. Security remains the top concern for banking institutions, and regular steps have been taken to improve the situation. The state of affairs is not as dire as outlined by researchers because many of the security flaws are difficult to exploit.

The real issue with the banking industry is the lack of a systematic defined approach to security testing their websites. There needs to be a single standard that all online financial institutions are tested against.

Cisco has some excellent initiatives such as SAFE that improve the security of customer deployments by defining configurations and testing steps that reduce vulnerabilities. The company also has service-focused teams of specialists that aid customers in securing their networks.

During my time at Cisco, I drove an initiative called SITE (Security Integration, Test and Evaluation) which defined a structured process for evaluating potential vulnerabilities, performing boundary & penetration testing, and evaluating the results in a logical matter. This approach was incorporated as part of the quality system and utilized across the company in testing multiple product lines. The process could be scaled from “light” to “heavy” based on the needs of the team performing the evaluation. The use of automation tools for “fuzzing” (sending in deliberately mal-formed packets) and other security testing was crucial for meeting tight deliverable schedules within the framework of SITE. Over the years, the original SITE initiative has evolved and now is included within the scope of other security enhancement programs (run by some real sharp engineers) that raise the standards to even a higher level.

What does the banking industry lack? Basically the online financial industry needs to define a SITE type of initiative and a set of common standards for securing their websites. The problem is not the inclusion of vulnerabilities (which will always pop-up), but the lack of screening for vulnerabilities in a structured manner. Banks do not have a methodical approach to find the vulnerabilities, nor a structured system for ranking and resolving the issues. Most banks are flying blind to what potential vulnerabilities currently exist on their websites because testing has only been performed piecemeal over time.

Banks and brokerages have a lot at stake; losses from compromised accounts continue to mount. It is time to raise the bar in the financial industry and reduce the exposure faced by customers. This requires a change in direction for security practices, and includes a need for information services cooperation between competing institutions. The best approach would be to create a focused team with IT representatives from multiple banks to define a central testing standard utilizing a structured approach for evaluating the security of online banking websites. After adoption, the methodology would need to be driven as a requirement across the industry.

Important: Funds over the FDIC limit at WaMu

If there is one post to sit up and pay attention to this month - This is the post.

Get your funds over the FDIC limit out of WaMu now! There appears to be a run on the bank forming and one likely end-game will be the FDIC seizing the bank; similar to the situation with another large bank, IndyMac, recently.

Knowledgeable investors have been removing funds for several weeks and now the situation has caught the attention of the mainstream press. A recent report by Gimme Credit cited liquidity concerns with Washington Mutual.

"We won't use the phrase `run on the bank,' but we would be remiss if we did not observe that many creditors have quietly been pulling funds,'' wrote Shanley, based in Chicago. Their actions are "presenting an increasing funding challenge,'' she wrote.'

The bank disputes the findings stating that 7 billion cash infusion led by TPG Inc, cost reduction plans, and a lack of need for commercial paper will help Washington Mutual ride out the storm. Many analysts are skeptical. These restructuring actions are helpful but will not enable the bank to survive a crush of depositors withdrawing funds from an institution that is increasingly looking like a house of cards. Standard depositors are likely to follow the lead of savvy unsecured creditors over the upcoming weeks as more bad press continues.

The second day of WM stock in free-fall is a more telling sign about the challenges facing the institution. While some would state that withdrawing your funds over the FDIC limit does not help the stability of the bank, the other side of the coin states that why should your be out of your funds from a personal finance perspective because you did not take action in the early stages while the crisis was unfolding.

Ignore the Press, Hedge Funds are still a Viable Investment

The hue and cry from the press regarding Hedge Funds continues unabated. Obviously a good number of funds have blown up over the past year, causing a sizeable investor headache.

One recent article “4 Reasons Why Investors Should Avoid Hedge Funds at All Costs” outlines issues with oversight, managerial churn, investment concentration, and short life spans. These aspects should be concerns for many individual investors, but should not serve to rule out hedge funds as appropriate portfolio component for qualified investors. Despite the recent turmoil, Hedge Funds have a long history of serving the needs of qualified investors; one excellent summary of Hedge Funds can be found in the Knowledge Base section on the HingeFire website.

One financial industry issue is that everyone and their brother opened a Hedge Fund in the past few years. Most chased similar strategies involving credit spreads that all fell apart at the exact same time as the black swan came for a visit.

Most of these funds did not have a long track record and a number of the managers simply marched down the street and opened a new fund after the wheels fell off their previous effort. Investors need to differentiate between hedge funds with long track records, some spanning decades, and those opened within the past few years.

Hedge Funds should only be used by investors who understand the risks and expectations. During the past few years, the sales of Hedge Funds have gone down-market as the funds were sold to people who were marginally qualified, many times wrapped up by major brokerage firms as fund-of-funds (or a pyramid of fees). Certainly the unscrupulous account representatives made plenty on commissions but they were not selling a product that was appropriate for the customer. Many investors were convinced to place nearly their entire portfolios into Hedge Funds will the promise of huge returns, a good number of these individuals are now crying foul to regulators.

Hedge Funds are only appropriate for institutions and qualified investors who understand finance. These customers recognize the investment is long term and are using the funds as a diversification mechanism in context of a larger portfolio. Hedge Funds do have an appropriate place in the market. It would remain best that they are not regulated except for stronger restrictions on the qualifications of investors who can utilize these vehicles.

Before advent commodity ETFs and mutual funds, many well-heeled investors used funds requiring investor qualification for exposure to the commodity markets. Most of the funds were CTA/CPO run by individuals with Series 3 licensing. This was a very appropriate diversification method for investors with sizeable portfolios.

Hedge Funds are also in the forefront of offering products that are difficult to obtain exposure from using standard retail financial products; some examples include currency, private equity, and credit spreads. For qualified investors the Hedge Fund products serve as an important diversification tool.

Investors who meet the qualification requirements of Hedge Funds should not automatically rule out these investment vehicles due to all the recent bad press. An investor should evaluate the needs of their portfolio in regards to diversification, returns, and timeframe in order to make an informed decision about Hedge Fund investment. It is important to use on-line resources to properly investigate the returns, longevity, and track record of Hedge Funds rather than simply investing in a fund-of-funds pushed by major brokerage firms. Hedge Funds can serve an important role in your portfolio, and investors should approach these vehicles with an open mind, and more importantly with open eyes.

Wachovia Earnings Call

Wachovia held its earnings call Tuesday. As expected the news was bleak; headlined by an $8.9 Billion loss, a steep dividend cut, and 10,750 job cuts. However, the stock rallied on the news and earnings call. While the loss and job cuts are painful, it appears that Wachovia has a plan to turn its operations around and deal with the bank’s mortgage exposure.

The stock rally demonstrates the confidence that Wall Street has in new CEO Robert Steel. Some of the points in the turn-around plan were outlined in the conference call transcript. Wachovia will not be raising more capital or selling additional stock that would dilute current shareholders stake. The dividend cut to 5 cents per share will save $700 million per quarter, while the wholesale mortgage operation will be shut down. Analysts expect that the bank will remain an independent operation.

Wachovia: Turning the corner

The recent press headlines for Wachovia have been bleak recently; auction-rate security investigation raids, analyst downgrades, and sliding share prices. It seems that the bank can't catch a break from the negative media coverage. This is on top of all the earlier problems that led many to question the underlying integrity of the entire institution which in the past has joined telemarketers to scam it's own customers, and was fined $145 million from the Feds.

Despite all the difficult news there is a bright spot -- and his name is new CEO Robert Steel . Right from the initial conference call it appears that he is on the right track. He is going to first evaluate the "challenges" faced by the bank with particular focus on the residential mortgage portfolio and exposure to commercial real estate. Steel promises to outline his strategy on July 22, when the bank is slated to report its second quarter earnings. In a couple days we will be able to see how Wall Street reacts to the earnings and the vision of the new leadership.

Based on his reputation in both capital markets and government; Steel is likely to restore what is most important to Wachovia - a reputation for integrity.

FREE forecasts for all the major commodity markets

We're excited to announce that our friends at Elliott Wave International are offering a FreeWeek of expert commodity forecasting services from noon Wednesday, July 16 to noon Wednesday, July 23.

FreeWeek is always exciting, but we're especially excited to share this one with you, as EWI opens its new Futures Junctures video portal to you. The new portal combines all of EWI's world-class commodities analysis onto one easy-to-navigate webpage. It allows you to easily toggle between near-, intermediate- and long-term forecasts and analysis, plus the hottest commodity opportunities presented in both video and text. And, only during FreeWeek, you get totally free access with no obligation to buy – ever!

Having an independent forecasting and opportunity-spotting service on your side is more important now than ever. FreeWeek lets you see for yourself, giving you top-level access and FREE forecasts for all the major commodity markets. This is an opportunity you don't want to pass up.

Dive into EWI's FreeWeek Now!