1

(28 replies, posted in Institution Errors)

broke again this morning...

2

(28 replies, posted in Institution Errors)

solution found!

it 'only' took $200+ to buy quickbooks and about 10 hours of developer time.

I wonder if the [intuit + bofa mafia] can be sued. Any attorneys here?

bofa wont tell us so the bad guys don't know how to hack them... their security changes are not making anyone secure.

They are giving us fake error messages to muddle the issue and throw us off. I will provide anyone that asks the solution via PM or EMAIL -- for free.

or if there is a way to make the solution private I will post here. Am I being paranoid? If I post the solution openly they may break it again and we have a cat and mouse race in our hands.

3

(28 replies, posted in Institution Errors)

BofA Called... they implemented on the 25-26 period a new security update.

They refuse to explain what is this new security feature because telling me would basically be telling the bad guys how to get into the bank. right...

I bit the bullet and installed QB2018 (purchased with the tech person being connected through webex) and created a dummy company. entered my credentials and to her and my surprise... there was no popup asking me to accept the connection to bank of america.

According to their official response now that QB is configured I should have been taken back to bank of america and prompted to allow this access. Either that or upon my next login to BofA.com I should receive a message... no message ever appeared.

this leads me to believe that either there is a new 'secret' ORG or a new server.. they also refuse to accept that they have blacklisted my server.

QB automagically works while our software fails and they do not support anything that is not quickbooks.

does anyone know where QB keeps the logs for the OFX connection?

4

(28 replies, posted in Institution Errors)

We are experiencing this same issue. The last day we were able to connect was 09/25/2017 around 6pm EST (our code does not run over night) then on 09/26/2017 at 9am the first failure was recorded. This code had been operational for about 7+ years.

We got bad 'user/password' combo message... after repeated attempts our server was (from what we can tell) black listed.

BofA blames our app. That everything on their end is working and it is a problem on our end. The deny having blacklisted us.
their "management" add-on ($15/month) was removed then re-added in the hopes that doing so would resolve the issue - this was advised by BofA rep.

After changing public IP and using a CLEAN+BLANK server only making the OFX logon request we get the same bad user+password combo error. After a few attempts we are black listed again.

I know we are being blacklisted because instead of getting bad user/pass errors the server times-out after several minutes of waiting. We change IPs and the process begins again... bad credentials then timeouts.

After several calls and continued denials, BofA promised to escalate the issue to another team who would be calling 24-48 hours after that call. About 36 hours have passed.

We have also attempted to

- Use TAXID as username (failed).
- Changing passwords
- Changing password complexity.
- Changing ORG to other names - cant find the source link now but changing this or FID generated a session error instead of bad credentials.

Did they change the authentication method to OAuth?

maybe
                <ORG>HAN
                <FID>5959

are no longer valid?


Also, to avoid being blacklisted we have implemented a function that uses this username:

anonymous00000000000000000000000

and any password. This generates a successful login which resets the bad credentials counter. So much for security.

Hello,

hopefully someone can help. I am using the new bofa URL (https eftx.bankofamerica.com/eftxweb/access.ofx)

no matter what I post all I get in return is a blank page.

if there is no POST data included I get

EnterpriseFTX Servlet Version 5.3.0

EnterpriseFTX Core Version @eftx_ver@
build time: @build_time@


any ideas?

thank you!

hello everyone,
all I get from that url is a blank page. I am using cURL do post and then retreive the respose. any ideas?

the blank page is returned whether or not I sent the correct credentials, wrong app number, blank post...

thank you in advance.

hi wassupdoc,

what is the new URL. the old one times out.

I have attempted using this one  eftx.bankofamerica.com/eftxweb/access.ofx


found on : http://wiki.gnucash.org/wiki/OFX_Direct … k_Settings

but I get a blank response. thank you in advance.