A few weeks ago, I wrote about Washington Mutual’s misleading error message on their online banking site. They later admitted that their Bill Payer upgrade did not go as planned, and plastered apologetic notices all over their site.
The mishap has been widely reported by the media. A later WaMu press release, quoted here, stated: “We began communicating to our customers as soon as the problem was discovered.” I can say that the statement is utter bullshit. Reports say the site was down as of July 22nd; my calls took place on the 26th. The “communications” on that day == four days later — took the form of an irrelevant error message on their site. WaMu claims they provided “telephone bankers with updates and options to share with customers” yet the two reps I spoke to seemed clueless about the nature of the outage and only offered assistance after I begged for it.
When the upgrade was finally completed (so they said), I tried to use it but was greeted with an obtrusive Javascript error message whenever I tried to change the date of a scheduled bill payment. I use Mozilla Firefox as my browser, so I am used to sites skirting the web standards and presenting tools that only work in Internet Explorer. So, I dug around my file system until I located IE, fired it up, and experienced the same issue.
I then tried to send a “secure” message to Washington Mutual. The link I clicked prompted me to log on again, so I did, and I was promptly dumped back to account listing. I clicked the email link again only to redirected to the logon page. Ad infinitum.
I resorted to sending a regular email to them, first complaining about their messaging system and then about the real issue: the bill payer. A few days later I got a response that the message problem was due to my browser settings (bullshit) and that completely ignored the issue about the bill payer. I have a number of other complaints related to their web site, so I figured: What the hell, let’s send some snail mail around. I targeted the President and a couple of relevant-sounding EVP’s with a letter [PDF].
A few days later, I got a fairly generic reply that referred to the problems with the upgrade but that basically side-stepped any of the issues I raised, especially the one about site security.
Today, a woman who knows a former lead worker on WaMu’s online security team told me some interesting information. It seems that he once wrote a white paper detailing the security flaws of a certain vendor’s product and posted it on a web site. WaMu turned around and purchased that product from the vendor to use for a component of its web site (I don’t know if it was related to the bill payer). The vendor complained about the white paper, and WaMu fired the security guy. Out of loyalty, his entire team resigned. This, she remembers, was about two months ago, meaning that it probably happened right in the midst of the roll out of their disastrous “upgrade” to their bill payer system.
Doesn’t that make me feel safe?








I’m not sure when I became the World’s Best Driver. There wasn’t a ceremony; I received no certificate or badge. But in the opinion of everyone who matters on this issue (i.e. me), there is no one on the planet who drives better than I do.