Ebay are advising everyone to reset their P.W. due to some breach a while ago.
Max.

 

Thank you.
It's very convenient the way they have this set up.
Just type in your user name and click on how you want them to contact you.

Unfortunately, they have not responded in 103 minutes after promising an email in 5 minutes.

 

Didn't know if it was real, as nothing on Ebay until I went to "edit".

Got the return Email immediately.

 

as nothing on Ebay until I went to "edit".

It is right at the top of my watch list page.
Max.

 

Well my proposed new password was rejected as not strong enough.

Now my old password was not cracked, it was stolen.

And it was stolen from those who have the temerity to tell me that my approach to passwords is not strong enough, not stolen from me.

I have seen the same problem with some Email suppliers.

I establish particular passwords for particlar reasons, but when the supplier's own security fails, they blame me and tell me that mys sytem is not strong enough, although again it has never been breached.

 

Ebay are advising everyone to reset their P.W. due to some breach a while ago.
Max.

I was just on there 2 days ago, and didn't see that PSA.

Thank you, Max.

 

kind of makes me glad I got off ebay 14 years ago. even tho I have gotten emails about having won items several times since then.

 

After I changed the PWord, I get this:





"What's important for you to know: We have no evidence that your financial information was accessed or compromised. And your password was encrypted.


What I ask of you:
Go to eBay and change your password. Changing your password may be inconvenient. I realize that. We are doing everything we can to protect your data and changing your password is an extra precautionary step, in addition to the other security measures we have in place.


If you have only visited eBay as a guest user, we do not have a password on file.


If you used the same eBay password on any other site, I encourage you to change your password on those sites too. And if you are a PayPal user, we have no evidence that this attack affected your PayPal account or any PayPal financial information, which is encrypted and stored on a separate secure network.


Here are other steps we are taking:

• As always, we have strong protections in place for both buyers and sellers in the event of any unauthorized activity on your account.
• We are applying additional security to protect our customers.
• We are working with law enforcement and leading security experts to aggressively investigate the matter.

Here's what we know: This attack occurred between late February and early March and resulted in unauthorized access to a database of eBay users that includes customers' name, encrypted password, email address, physical address, phone number and date of birth.


However, the file did not contain financial information. And, after conducting extensive testing and analysis of our systems, we have no evidence that any customer financial or credit card information was involved. We also have no indication of a significant spike in fraudulent activity on our site.


We apologize for any inconvenience or concern that this situation may cause you. As a global marketplace, nothing is more important to eBay than the security and trust of our customers. We know our customers have high expectations of us, and we are committed to ensuring a safe and secure online experience for you on any connected device."

 

"This attack occurred between late February and early March and resulted in unauthorized access to a database of eBay users that includes customers' name, encrypted password, email address, physical address, phone number and date of birth."




How could they know this, and NOT know, exactly when it was compromised?

 

I got this notice, and what really gripes me is I haven't used Ebay in over a decade. Even I don't remember my PW. I hate they keep information forever!

 

Ebay are advising everyone to reset their P.W. due to some breach a while ago.
Max.

As some members know, i like words and word choices. I am amused when I see a plural verb used with a collective noun. (I'm not saying that it's wrong, just that it amuses me.) What makes it especially amusing in this case is that the writer of the ebay notice apparently couldn't decide whether he/she is writing as a singular or plural person.

What's important for you to know: We have no evidence that your financial information was accessed or compromised. And your password was encrypted.
What I ask of you:
Go to eBay and change your password. Changing your password may be inconvenient. I realize that. We are doing everything we can to protect your data and changing your password is an extra precautionary step, in addition to the other security measures we have in place. etc.

In fact, the whole notice is so poorly written, I wonder if this is indicative of ebay's overall commitment to quality.

 

As some members know, i like words and word choices. I am amused when I see a plural verb used with a collective noun. (I'm not saying that it's wrong, just that it amuses me.) What makes it especially amusing in this case is that the writer of the ebay notice apparently couldn't decide whether he/she is writing as a singular or plural person.



In fact, the whole notice is so poorly written, I wonder if this is indicative of ebay's overall commitment to quality.

Yes, my letter almost looks like spam?

 

Yes, my letter almost looks like spam?

I am an ebay member, but i haven't gotten any notice. And I am on a public wi-fi and can't access my ebay account. Is it possible this whole thing is a phishing attempt?

 

Well my proposed new password was rejected as not strong enough.

Now my old password was not cracked, it was stolen.

And it was stolen from those who have the temerity to tell me that my approach to passwords is not strong enough, not stolen from me.

I have seen the same problem with some Email suppliers.

I establish particular passwords for particlar reasons, but when the supplier's own security fails, they blame me and tell me that mys sytem is not strong enough, although again it has never been breached.

This reminds me of this strip: http://xkcd.com/936/

However, it is true that password hacking involves the use of dictionaries and lists of other known passwords.

 

I am an ebay member, but i haven't gotten any notice. And I am on a public wi-fi and can't access my ebay account. Is it possible this whole thing is a phishing attempt?

Yeah, I've been a member since 2003, and never received a pword notice before.?

Wonder if I screwed up?

Haven't noticed anything unusual...........yet.

 

If you ever receive an email direct from ebay, go to your ebay Messages page, if it is from ebay, it will be there also.
Max.

 

If you ever receive an email direct from ebay, go to your ebay Messages page, if it is from ebay, it will be there also.
Max.

That's why I was suspicious of the email.

In my case it was not and is not in my Ebay message folder.

The "PW changed" did come to my email and message folder.

If not for discussion here it would have been ignored.

 

In my case it was not and is not in my Ebay message folder.

Did you check the "Message from ebay" or just the "message from members"?, there are two categories in the folder.
Max.

 

This just popped up in My Messages:



This is a courtesy message to let you know that your eBay password has been successfully changed. No response is needed.


Thank you,

eBay Trust Team



However, I still have a banner that says to change the Pword.

 

I think the banner is just a blanket statement attached to the page.
Max.