Re: Ebay hacked

Path	csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!news.swapon.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From	Sylvia Else <sylvia@not.at.this.address>
Newsgroups	comp.misc
Subject	Re: Ebay hacked
Date	Sun, 25 May 2014 19:33:23 +1000
Lines	35
Message-ID	<budrn4Ff0vtU1@mid.individual.net> (permalink)
References	<bu5nskFnom7U1@mid.individual.net> <slrnlns7m5.scb.g.kreme@amelia.local> <vg3oayn5gh3.fsf@coffee.modeemi.fi> <llqgej$ita$1@dont-email.me> <0.5bf5b66404db399cfef4.20140524204522BST.87oayn2c6l.fsf@bsb.me.uk>
Mime-Version	1.0
Content-Type	text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding	7bit
X-Trace	individual.net 7MnGO5M/qm8pj32rcwDjVQ8Ph/q9k6YMei2nLUXcs+u3D4qvg3
Cancel-Lock	sha1:IpHEFmnXaklu1h4afw0CHOaZgwQ=
User-Agent	Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.5.0
In-Reply-To	<0.5bf5b66404db399cfef4.20140524204522BST.87oayn2c6l.fsf@bsb.me.uk>
Xref	csiph.com comp.misc:3135

Show key headers only | View raw

On 25/05/2014 5:45 AM, Ben Bacarisse wrote:
> Rich <rich@example.com> writes:
>
>> Anssi Saari <as@sci.fi> wrote:
>>> Lewis <g.kreme@gmail.com.dontsendmecopies> writes:
>>
>>>> Hard to say, but Fleabay has *always* been incompetent.
>>
>>> Now ebay apparently botched the password reset page too by not allowing
>>> pasting from the clipboard. Ars writes about it at
>>> http://arstechnica.com/security/2014/05/after-the-breach-ebays-flawed-password-reset-leaves-much-to-be-desired/
>>
>> That is likely the result of some managerial drone idiot who is
>> technically incompetent thinking that crooks perform brute force
>> password search by:
>>
>> 1) using a browser, and;
>> 2) driving the browser via copy&paste
>>
>> Neither is true, but the managerial drone idiot got to look like he/she
>> did something useful to the other managerial drone idiots by
>> "increasing security".
>
> I think it's driven from the idea that having to type your password
> (usually twice) means it will be less likely that you enter the wrong
> one and be locked out.  The particular fear I've come across is
> preventing cut and paste from the first box to that awful "retype
> password" box, thereby propagating a typo.

Though given that there is almost invariably an automated mechanism for 
recovering from a forgotten password, it's not a valid reason, though 
I'll concede that that may have been the thinking behind it.

Sylvia.

Thread

Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-22 17:38 +1000
  Re: Ebay hacked RS Wood <rsw@therandymon.com> - 2014-05-22 13:35 +0000
    Re: Ebay hacked Andy Burns <usenet.feb2014@adslpipe.co.uk> - 2014-05-24 14:32 +0100
  Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-22 15:59 +0000
    Re: Ebay hacked Anssi Saari <as@sci.fi> - 2014-05-23 17:06 +0300
      Re: Ebay hacked Rich <rich@example.com> - 2014-05-24 16:13 +0000
        Re: Ebay hacked Ben Bacarisse <ben.usenet@bsb.me.uk> - 2014-05-24 20:45 +0100
          Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-25 19:33 +1000
            Re: Ebay hacked Jerry Peters <jerry@example.invalid> - 2014-05-25 20:19 +0000
              Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-25 21:50 +0000
      Re: Ebay hacked Rich <rich@example.com> - 2014-05-24 16:53 +0000
        Re: Ebay hacked Anssi Saari <as@sci.fi> - 2014-05-24 21:12 +0300
          Re: Ebay hacked Rich <rich@example.com> - 2014-05-24 18:33 +0000
            Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-25 19:37 +1000
              Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-25 13:46 +0000
                Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-26 16:55 +1000
                Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-26 18:42 +0200
          Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-27 13:38 +0200
        Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-24 22:32 +0000
        Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-25 19:36 +1000
          Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-25 14:00 +0000
            Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-25 17:18 +0200
          Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-25 22:53 +0200
            Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-26 17:03 +1000
              Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-26 13:17 +0000
                Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-27 15:18 +1000
          Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-26 06:57 +0000
            Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-26 17:07 +1000
              Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-26 13:21 +0000
              Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-27 05:53 +0000
            Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-26 13:19 +0000
            Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-26 18:46 +0200
      Re: Ebay hacked "BartC" <bc@freeuk.com> - 2014-05-24 20:54 +0100
        Re: Ebay hacked Rich <rich@example.com> - 2014-05-24 20:24 +0000
        Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-24 22:35 +0000
  Re: Ebay hacked "James Harris" <james.harris.1@gmail.com> - 2014-05-23 00:28 +0100
    Re: Ebay hacked simple@machines.gopher - 2014-05-23 14:30 +0000
      Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-24 00:36 +1000
        Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-24 13:34 +0200
    Re: Ebay hacked mm0fmf <none@mailinator.com> - 2014-05-23 18:21 +0100
      Re: Ebay hacked Tim Streater <timstreater@greenbee.net> - 2014-05-23 18:39 +0100
        Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-24 16:29 +1000
      Re: Ebay hacked RS Wood <rsw@therandymon.com> - 2014-05-23 21:57 +0000
      Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-24 16:28 +1000
    Re: Ebay hacked "James Harris" <james.harris.1@gmail.com> - 2014-05-26 15:27 +0100
      Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-26 14:32 +0000

csiph-web