Ebay Password warning

Discussion in 'Off-Topic' started by MaxHeadRoom, May 23, 2014.

  1. MaxHeadRoom

    Thread Starter Expert

    Jul 18, 2013
    10,543
    2,369
    Ebay are advising everyone to reset their P.W. due to some breach a while ago.:(
    Max.
     
    Metalmann likes this.
  2. #12

    Expert

    Nov 30, 2010
    16,284
    6,797
    Thank you.
    It's very convenient the way they have this set up.
    Just type in your user name and click on how you want them to contact you.

    Unfortunately, they have not responded in 103 minutes after promising an email in 5 minutes.:mad:
     
    Last edited: May 24, 2014
  3. inwo

    Well-Known Member

    Nov 7, 2013
    2,433
    315
    Didn't know if it was real, as nothing on Ebay until I went to "edit".

    Got the return Email immediately.
     
  4. MaxHeadRoom

    Thread Starter Expert

    Jul 18, 2013
    10,543
    2,369
    It is right at the top of my watch list page.
    Max.
     
  5. studiot

    AAC Fanatic!

    Nov 9, 2007
    5,005
    513
    Well my proposed new password was rejected as not strong enough.

    Now my old password was not cracked, it was stolen.

    And it was stolen from those who have the temerity to tell me that my approach to passwords is not strong enough, not stolen from me.

    I have seen the same problem with some Email suppliers.

    I establish particular passwords for particlar reasons, but when the supplier's own security fails, they blame me and tell me that mys sytem is not strong enough, although again it has never been breached.
     
  6. Metalmann

    Active Member

    Dec 8, 2012
    700
    223



    I was just on there 2 days ago, and didn't see that PSA.

    Thank you, Max.
     
  7. alfacliff

    Well-Known Member

    Dec 13, 2013
    2,449
    428
    kind of makes me glad I got off ebay 14 years ago. even tho I have gotten emails about having won items several times since then.
     
  8. Metalmann

    Active Member

    Dec 8, 2012
    700
    223
    After I changed the PWord, I get this:





    "What's important for you to know: We have no evidence that your financial information was accessed or compromised. And your password was encrypted.



    What I ask of you:
    Go to eBay and change your password. Changing your password may be inconvenient. I realize that. We are doing everything we can to protect your data and changing your password is an extra precautionary step, in addition to the other security measures we have in place.



    If you have only visited eBay as a guest user, we do not have a password on file.



    If you used the same eBay password on any other site, I encourage you to change your password on those sites too. And if you are a PayPal user, we have no evidence that this attack affected your PayPal account or any PayPal financial information, which is encrypted and stored on a separate secure network.



    Here are other steps we are taking:
    • As always, we have strong protections in place for both buyers and sellers in the event of any unauthorized activity on your account.
    • We are applying additional security to protect our customers.
    • We are working with law enforcement and leading security experts to aggressively investigate the matter.



    Here's what we know: This attack occurred between late February and early March and resulted in unauthorized access to a database of eBay users that includes customers' name, encrypted password, email address, physical address, phone number and date of birth.



    However, the file did not contain financial information. And, after conducting extensive testing and analysis of our systems, we have no evidence that any customer financial or credit card information was involved. We also have no indication of a significant spike in fraudulent activity on our site.



    We apologize for any inconvenience or concern that this situation may cause you. As a global marketplace, nothing is more important to eBay than the security and trust of our customers. We know our customers have high expectations of us, and we are committed to ensuring a safe and secure online experience for you on any connected device."
     
  9. Metalmann

    Active Member

    Dec 8, 2012
    700
    223
    "This attack occurred between late February and early March and resulted in unauthorized access to a database of eBay users that includes customers' name, encrypted password, email address, physical address, phone number and date of birth."




    How could they know this, and NOT know, exactly when it was compromised?
     
  10. Brownout

    Well-Known Member

    Jan 10, 2012
    2,375
    998
    I got this notice, and what really gripes me is I haven't used Ebay in over a decade. Even I don't remember my PW. I hate they keep information forever!
     
  11. tracecom

    AAC Fanatic!

    Apr 16, 2010
    3,869
    1,393
    As some members know, i like words and word choices. I am amused when I see a plural verb used with a collective noun. (I'm not saying that it's wrong, just that it amuses me.) What makes it especially amusing in this case is that the writer of the ebay notice apparently couldn't decide whether he/she is writing as a singular or plural person.

    In fact, the whole notice is so poorly written, I wonder if this is indicative of ebay's overall commitment to quality.
     
    Last edited: May 25, 2014
    Metalmann likes this.
  12. Metalmann

    Active Member

    Dec 8, 2012
    700
    223



    Yes, my letter almost looks like spam?:confused:;)
     
  13. tracecom

    AAC Fanatic!

    Apr 16, 2010
    3,869
    1,393
    I am an ebay member, but i haven't gotten any notice. And I am on a public wi-fi and can't access my ebay account. Is it possible this whole thing is a phishing attempt?
     
  14. Georacer

    Moderator

    Nov 25, 2009
    5,142
    1,266
    This reminds me of this strip: http://xkcd.com/936/

    However, it is true that password hacking involves the use of dictionaries and lists of other known passwords.
     
  15. Metalmann

    Active Member

    Dec 8, 2012
    700
    223


    Yeah, I've been a member since 2003, and never received a pword notice before.?

    Wonder if I screwed up?

    Haven't noticed anything unusual...........yet.;)
     
  16. MaxHeadRoom

    Thread Starter Expert

    Jul 18, 2013
    10,543
    2,369
    If you ever receive an email direct from ebay, go to your ebay Messages page, if it is from ebay, it will be there also.
    Max.
     
    Last edited: May 25, 2014
  17. inwo

    Well-Known Member

    Nov 7, 2013
    2,433
    315
    That's why I was suspicious of the email.:confused:

    In my case it was not and is not in my Ebay message folder.

    The "PW changed" did come to my email and message folder.

    If not for discussion here it would have been ignored.
     
  18. MaxHeadRoom

    Thread Starter Expert

    Jul 18, 2013
    10,543
    2,369
    Did you check the "Message from ebay" or just the "message from members"?, there are two categories in the folder.
    Max.
     
  19. Metalmann

    Active Member

    Dec 8, 2012
    700
    223
    This just popped up in My Messages:



    This is a courtesy message to let you know that your eBay password has been successfully changed. No response is needed.


    Thank you,

    eBay Trust Team



    However, I still have a banner that says to change the Pword.
     
  20. MaxHeadRoom

    Thread Starter Expert

    Jul 18, 2013
    10,543
    2,369
    I think the banner is just a blanket statement attached to the page.
    Max.
     
    Metalmann likes this.
Loading...