x404.co.uk
http://www.x404.co.uk/forum/

Ebay urges password change
http://www.x404.co.uk/forum/viewtopic.php?f=19&t=22011		 Page 1 of 1
Author:  l3v1ck [ Wed May 21, 2014 2:02 pm ]
Post subject:  Ebay urges password change
News CLICKY
Quote:
EBay has asked users to change their passwords following a cyberattack that compromised one of its databases.

The US firm said the database was hacked between late February and early March, and had contained encrypted passwords and other non-financial data.

The auction site added that it had no evidence of there being unauthorised activity on its members' accounts.

However, it said that changing the passwords was "best practice and will help enhance security for eBay users".
Author:  pcernie [ Wed May 21, 2014 2:23 pm ]
Post subject:  Re: Ebay urges password change
Fcuking marvelous, but thanks for the heads up!
Author:  timark_uk [ Wed May 21, 2014 4:34 pm ]
Post subject:  Re: Ebay urges password change
*sigh*

Mark
Author:  steve74 [ Wed May 21, 2014 9:07 pm ]
Post subject:  Re: Ebay urges password change
Apparently compromised in February/March! Nice to see ebay are on top of their security then. :roll:
Author:  pcernie [ Wed May 21, 2014 9:16 pm ]
Post subject:  Re: Ebay urges password change
I changed mine earlier.
Author:  paulzolo [ Thu May 22, 2014 9:07 am ]
Post subject:  Re: Ebay urges password change
Passwords and logins are clearly broken. There needs to be a better way.
Author:  Spreadie [ Thu May 22, 2014 9:27 am ]
Post subject:  Re: Ebay urges password change
Yeah changed mine, after hearing this through the media and not directly from Ebay! :roll:

Coincidentally, I received a couple of bogus Paypal emails the other day claiming I had been sent payments, along with the obligatory fake site link to log in.
Author:  l3v1ck [ Thu May 22, 2014 9:55 am ]
Post subject:  Re: Ebay urges password change
Spreadie wrote:
Yeah changed mine, after hearing this through the media and not directly from Ebay! :roll: .

+1

Though I did get an email from ebay eventually.
Author:  paulzolo [ Thu May 22, 2014 12:55 pm ]
Post subject:  Re: Ebay urges password change
Password changing on eBay is a hideous nightmare. Much like many others, I use 1Password to generate nice, long random strings of characters.

To the process is this:
1 - Get 1Password to generate a random password for you. Copy this to your clipboard

2 - Log into eBay

3 - Trigger a change password email

4 - Wait for email and then click the link they send

5 - eBay password change page appears.

6 - Click in first field and past in password. Err.. Hang on... This doesn't work. Check source of page - the input forms have onpaste events set to disable pasting.

7 - Disable JavaScript in browser, and hit refresh.

8 - The page tells you to enable JavaScript to change your password....

Yup - the eBay change password system relies on JavaScript so that you can not paste a long, strong, password into the fields.
Author:  Spreadie [ Thu May 22, 2014 3:57 pm ]
Post subject:  Re: Ebay urges password change
paulzolo wrote:
Password changing on eBay is a hideous nightmare.

No it isn't. It was very simple.

It asked me to confirm my identity, and then emailed me a link to change the password. That was it.
Author:  pcernie [ Thu May 22, 2014 6:12 pm ]
Post subject:  Re: Ebay urges password change
Spreadie wrote:
paulzolo wrote:
Password changing on eBay is a hideous nightmare.

No it isn't. It was very simple.

It asked me to confirm my identity, and then emailed me a link to change the password. That was it.


I did it through the site, which is a curious experience as even today eBay still looks like sh1t.
Page 1 of 1 All times are UTC
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/