Quicken Quotes Server on the Fritz?

Looks like it's time to park myself on the couch, turn on the TV, grab my MacBook, and settle in for an exciting evening of refreshing my spreadsheet until today's quotes show up.

@Taz Xen Works perfectly! Thank you so much for sharing this.

I am now putting my QIF-generator spreadsheet into mothballs, at least until such time as Quicken permanently canks our ability to download Q7M quotes, or until I forget to do it for a couple of weeks and need to go back further than five trading days!

@kohster there isn't any reason for the quotes to go through a secure channel.  

Downloading of transactions and such private information definitely goes through a secure channel.

To everyone on this thread that has spreadsheet such on my website, let me know if you want to take it down.

I'm wondering if I should throw hornet's nest into the room...   Hmmm.  Yeah I'm feeling a bit evil today. 

I guess everyone realizes that with a one line code change Quicken Inc could bring this functionality back to Quicken Mac 2007 and people wouldn't have to do the workaround.  Now would they consider that worth it?

I believe that's why it stopped working for me: it had been fine until March 2. That's when they removed the "qw2007" subdomain, which kills off quotes for the older versions without a workaround like this. Fortunately the identical functionality is still available at another URL.

kohster said:

I disagree that there isn't any reason to pass quotes through a secure channel. I can see back in 2007 making a decision that since that the quotes aren't personal information that it wasn't quite necessary to encrypt them, but in this day and age everything that can be encrypted should be by default.

And yet you gleefully are downloading quotes into Quicken Mac 2007.  Do you think that somehow Quicken Mac 2007 is somehow more secure doing this download than newer version of Quicken Mac would be?

Whereas I agree that there isn't any reason why Quicken Inc shouldn't use a secure connection for everything these days, the reason is more about "convince" than security.  Why have different connect methods if you can just use one kind and it serves for all the use cases.  But in fact the main reason they probably haven't changed this is backwards compatibility.

If the new Quicken Mac adopts that policy your quotes will be quickly cut off.
Having a secure connection is a two way street.  The moment that they decide that all the server communication has the be on a secure channel and change the servers over the clients, which currently include Quicken Mac 2007 have to change too.  And if they aren't willing to put out a new version of Quicken Mac 2007, there goes your quotes.  And BTW if you think Quicken Mac 2007 is the only version that has noticed this your wrong.  People have come in here complaining of being cut off with old versions of Quicken Windows.

I have no idea how "Quicken Inc" feels about supporting Quicken Mac 2007 and if they will put out a new version for something like this, but I would imagine as business they are pretty tired of what they see as supporting a product that they get no money for.

"Security" is a "touchy" subject with me.  There are tons of people that tell you what is "secure" or not and most of the time they are reading from a 30 year old playbook that was never really right in the first place.  Security needs to be thought out and kept current with what is known now.  And what's more its cost should be weighed too.

Currently the financial institutions put in a lot painful blocks in their system that at the least make it hard for the user (and programs like Quicken) and at the worse actual make the system less secure ("security questions" that allow the person to "bypass" the password are one such case).

From the above you might say then why even mention that HTTP isn't really "needed", after all shouldn't I be "keeping current"?

Understanding security is knowing when something is truly needed or not, or more exactly what "price" you are paying for such (in both risk and money/time).  If something isn't truly needed then it comes down to the cost.  If you go to my website you will see that it is HTTP not HTTPS.  Why?  It costs money to have HTTPS opposed to HTTP both for the service and for certificate.  And even above that certificate requires a business address, and the only one I would have is my home.  And so the "cost" to me would be my privacy.

So yes everyone that comes to my site risks me having software that might collect information on them.  Or that somehow someone might track what they are doing on my site.  You will notice though that any of the downloaded files are from secure sites.  Some of the sites that I read news and comics on aren't HTTPS either, and I personally have no problem with that at all.

The world is filled with compromise.  And everyone has to decide for themselves what compromises they will make for what they want.  I personally have zero concern about Quicken getting quotes on an unsecure connection.  And wouldn't be "shuddering" if they aren't using a secure connection, which BTW I'm sure they aren't.   I hope you don't really believe that they left that machine running that @Taz Xen found just so that Quicken Mac 2007 can use it right?

kohster said:

For most people the best you are trying to do is live up to the old joke about the 2 friends who started getting chased by the bear and as the punchline one says to the other, "I don't have to outrun the bear, I just have to outrun you." Make yourself just slightly less attractive/noticeable to the hackers/miscreants, and they'll have more than enough targets to work with.

The problem with this statement is that most people have no idea how hackers work or how they can make themselves less of a target.  They buy into the hype of what is put out on websites and fail to really spend their time working to have real security.

Point in fact, the the new “rage” is VPN.  Well guess what that by its nature groups you with others and as such makes for a nice target.   And that is exactly what has happened.  There have been various VPN programs hacked.

Another big one on here is the complaint about not having allowing more that say 15 character passwords (set by their own financial institution BTW, since Quicken’s limit is 32 characters).  Not only would it take centuries to brute force a 15 character password, financial institutions lock your account after three incorrect tries.  The only time a password hack comes into play is if they research the person and they are stupid enough to have a very simple password to guess or use the same one on a non encrypted site that has been hacked.  In general hackers attach the website’s network/software or your device.  That is where it pays.  And once they have that none of your “security” is means anything.

And some of the most valuable/vulnerable data out there you have no control over, like your social security number or your credit history.  That is just to world we live in.

BTW one of the things that I noticed over the years is how easy it is to setup the online part of accounts.  As in I imagine there are plenty of people that say, I’m not vulnerable to online attack because I have never setup online access.  But I have connected online access to accounts with knowing little more than the account number (which is on your checks) and some simple details about my history.  So in fact those accounts were far less vulnerable after I connected them for online access, because at least they had to somehow bypass my password.

I do agree that one of (maybe the only true one) defense the average person has is being as anonymous as possible.  But short of keeping all my money under your mattress (which has its own risks) you are already a big “known” target because all the financial institutions are targets.

A number of other CLI text editors are available as well on the Mac by default. vi/vim, emacs, pico, ed....