retrofanatic wrote:

"eBay hit with massive security breach, asks all users to change passwords": http://www.theverge.com/2014/5/21/5737914/eba … -ma […]
Show full quote

"eBay hit with massive security breach, asks all users to change passwords":
http://www.theverge.com/2014/5/21/5737914/eba … -massive-breach

I signed on eBay today and didn't notice anything, but I went ahead and changed my password.

Has anyone been affected by this?

Not yet, but I changed mine too. Saw the article here:
http://www.cnet.com/news/ebay-hacked-requests … ange-passwords/

hmm the bbc is saying 14m ebay uk accounts at risk but ebay sent me nothing and i can see nothing about it on ebay uk.

changed password anyway as it was a bit weak 😜

hoax maybe?

Changed both my ebay and PayPal password.

Since i tend to make pretty retarded passwords it was a pain in the ass to make and memorize a new one -__-

Yeesh. Hadn't heard a thing about it, but changed my password anyways. Also wasted about an hour looking at various old hardware... 🤣

eBay itself is overriding its usual index page item recommendations to warn people to change their password, though they don't say why, just to do it. Once you've done so, it goes back to showing item recommendations.

Really appreciate the heads up! Really is too bad this had to happen. Ebay isn't like one of those unknown cheap sites either. Hopefully nothing bad results from this...

Sigh. If a big company like Ebay cannot keep their servers secure, what does that mean for the rest of the internet? Changing passwords after breeches is becoming a common practice now.

laxdragon wrote:

Sigh. If a big company like Ebay cannot keep their servers secure, what does that mean for the rest of the internet? Changing passwords after breeches is becoming a common practice now.

From reading the c|net article it made it sound like this was more an example of social engineering and not any sort of "hacking" (but of course the media would have us believe Johnny Lee Miller and Angelina Jolie are "hacking the gibson" on this one) - it makes it a lot less surprising. It's a well established truth in IT that people cannot keep their secret passwords secret (hey, mine's gizmo!). 😢

Well that's wonderful, though I never actually bought anything (I gave up trying to sign up for paypal) I don't remember my password nor my security question to my account.

I wonder what I must do to get eBay to terminate it since I don't even want to be signed up there anymore.

DracoNihil wrote:

I wonder what I must do to get eBay to terminate it since I don't even want to be signed up there anymore.

You have a security question? :o

I don't. I just request a password reset on the eMail I used to sign up and they send an eMail to go through the reset process. :P

Well I don't want to reset the password, I want to totally terminate the account entirely. I only ever wanted to go on eBay once just to get one thing I couldn't find anywhere else... I already have said thing, I don't want the account anymore now especially after this security breach.

After I changed the password all lots related to my saved searches disappeared from ebay dashboard. Now only ebay deals are shown at ebay homepage. My saved searches themselves are intact. What happened and how do I restore status quo?

DracoNihil wrote:

Well I don't want to reset the password, I want to totally terminate the account entirely. I only ever wanted to go on eBay once just to get one thing I couldn't find anywhere else... I already have said thing, I don't want the account anymore now especially after this security breach.

I wish I could terminate my account, but there is just so much available on eBay that I cannot get anywhere else. I think it is almost impossible to have every single last bit of your information deleted for good from eBay. It seems like these online companies are almost like a credit card companies now...the databases of information they have is probably worth money to 3rd party bidders who want their information to compile marketing mailing/calling lists. I would not doubt that eBay would have partaken in such deals over the years just like VIS*, Maste*Car*, and others most likely do or have done in the past. I have credit card companies with whom I have cancelled my credit card account with over 10 years ago still contacting me to try and sign me up again and I have called them numerous times to remove all my information from their system, but obviously they still have it. Also, unsolicited marketing calls to my house seem to increase when I sign up for a new card or an online service...I am not sure this is the reason, but it really seems like more than just a coincidence and it makes me wonder. I am guessing that anyone who has received unsolicited mail to your home and marketing calls to your phone can probably (at least partially) attribute it to these companies.

retrofanatic wrote:

I wish I could terminate my account, but there is just so much available on eBay that I cannot get anywhere else. I think it is almost impossible to have every single last bit of your information deleted for good from eBay. It seems like these online companies are almost like a credit card companies now...the databases of information they have is probably worth money to 3rd party bidders who want their information to compile marketing mailing/calling lists. I would not doubt that eBay would have partaken in such deals over the years just like VIS*, Maste*Car*, and others most likely do or have done in the past. I have credit card companies with whom I have cancelled my credit card account with over 10 years ago still contacting me to try and sign me up again and I have called them numerous times to remove all my information from their system, but obviously they still have it. Also, unsolicited marketing calls to my house seem to increase when I sign up for a new card or an online service...I am not sure this is the reason, but it really seems like more than just a coincidence and it makes me wonder. I am guessing that anyone who has received unsolicited mail to your home and marketing calls to your phone can probably (at least partially) attribute it to these companies.

The credit offers are actually just par for the course - you can opt-out of them through Experian (iirc its Experian, it might be Equifax; it's one of the big three and you have to contact them in writing but they do honor it (their "push" for it is to save paper)).

The phone calls are actually indicative of the times in general - fraudulent charities and Caribbean scams have been on the rise over the last few years, and there seems to be no end in sight. Do-Not-Call and similar have no influence on that, because of robodialing (and most of these "companies" are the kind of bottom-feeders that really don't care about laws because they know they're doing something shifty to start with; like collection agencies and other bottom feeders). Basically if you have a phone, expect to get multiple BS calls a day. A hard-disconnect switch does wonders... 😀

Just to add a tidbit that I saw on the nightly news here; ebay stated that this was not a typical security breach but rather a case of two employees who lost control of their own passwords and access was made by signing into these "official" ebay accounts. Apparently their customer service workers need to change their own passwords?

Anyway, I had just went through the process of changing my passwords about six weeks ago, and since ebay says that this all happened back in February... I changed only my ebay password... and that to be on the safe side.

My passwords have gotten quite a bit stronger over the past months - no BS stuff anymore. Screw it- may as well bite the bullet, get used to doing it for real till a better solution comes along.