New York1/6/09 5:51 PM EST°My Money Vista is COOL- officially!
We where telling you for a while now that our My Money Vista software is the best (and very cool) way to track your personal / small business finance transactions…Well if you don’t believe us, here is what Yankee is saying:
Dear ZPSSoft,
You are receiving this e-mail because your great software - My Money Vista was reviewed by YankeeDownload.com and got COOL!! award!
September 30th, 2008 at 6:03 pm
Sent a email about password security regarding the My Money Vista, please drop me a line if you have any further questions.
September 30th, 2008 at 6:41 pm
Hello Rich,
It appears that you have some technical questions about My Money password security. Unfortunately I can not forward your email to our technicians because you need to be registered user and submit your user’s ID in order to contact or obtain our technical support. Sorry I could not help more…
October 7th, 2008 at 12:20 pm
I’ve sent emails about how easy it was to figure out the password encoding and I detailed how you should go about fixing the flaw in the future. Our client no longer uses the product because of how quickly we were able to figure out the encoding. We were simply trying to be helpful to you and your customer base by disclosing the info to you first. If you don’t feel like reporting the password encoding is very weak, that’s fine with us, again we simply were offering suggestions to help. The details are again in the emails I sent to generalinfo at zps soft dot com. GL!
October 7th, 2008 at 2:09 pm
Hello again Rich,
You did send email about your “encoding” but without information about your “client”. Perhaps you didn’t know but software that you are referring to, My Money, cost less then $10.00. This cost includes ZPSSoft Support that again, includes free password recovery in event of incidental password loss. I don’t see the logic that your “client” was using when deciding to hire someone to do the job that could be done for free, via ZPSSoft Support. Not to mention how much is the password recovery job worth when the entire software cost less then $10.00!
Only explanation is that your “client” obtained his software illegally, but in that case, that is in a fact not even our software. ZPSSoft is aware that driven by the success of My Money, several “companies” attempted to copy this product in name, look and functionality. This “products” has nothing to do with genuine My Money and they usually contain spyware or other malicious code. That’s why your “password recovery” that perhaps works for these illegal copies are in fact not functional on ZPSSoft Genuine Full Version (purchased) product. Finally, you should know that any type of reverse engineering, password tampering etc… of ZPSSoft products without ZPSSoft approval is illegal act punishable by law. You and your company should direct your client to ZPSSoft Support, providing that your client uses our genuine and full version software.
October 7th, 2008 at 2:37 pm
I couldn’t tell you if it was the purchased version or the trial/free version. I know how much it costs, however the data inside the application, you can understand is worth much more than that. Also we were hired to audit their SOX compliance, network, web app’s and other security, when all of sudden an employee became disgruntled/threatened by our presence.
Again a disgruntled employee reset the password to cause damage (he did a number of other things as well) and acted out against his boss because he was being fired. Our client did not know if there was support or if the software was purchased because My Money housed all the invoice data to his knowledge. We were asked if we knew how to recover the pass quickly, and we looked, figured it out, and that was that.
I guess I have to assume that the Full version uses a better method of password protection and that they were using the free version. The client no longer uses any version of ZPSSoft products.Thanks again for you time.
October 7th, 2008 at 3:25 pm
You welcome, my job is to respond to web posted inquires. The disgruntled employee most likely didn’t use our “My Money”, but one of the replicas. Otherwise, he could just backup database on his removable device and then simply uninstall My Money from the company’s computer. This will allow him to take the disputed data with him making it impossible for the company to recover anything, including password.