Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.misc > #3007

Re: Ebay hacked

From "James Harris" <james.harris.1@gmail.com>
Newsgroups comp.misc
Subject Re: Ebay hacked
Date 2014-05-23 00:28 +0100
Organization A noiseless patient Spider
Message-ID <llm1dt$3v4$1@dont-email.me> (permalink)
References <bu5nskFnom7U1@mid.individual.net>

Show all headers | View raw

"Sylvia Else" <sylvia@not.at.this.address> wrote in message 
news:bu5nskFnom7U1@mid.individual.net...
> http://www.smh.com.au/it-pro/security-it/ebay-hit-by-cyber-attack-urges-users-to-change-passwords-20140521-zrkiu.html

This appears to be worse than I thought. From the Telegraph: "It admitted 
that the name, address, date of birth, telephone number, email address and 
password of every eBay account holder - 233 million people worldwide - was 
in the hands of the hackers."

http://www.telegraph.co.uk/technology/news/10848080/More-than-15-million-Britons-at-risk-of-identity-theft-after-eBay-hacked.html

There are also claims that Ebay has told its customers that they have to 
change their passwords. I haven't received any email from them. Nor is there 
a message against my Ebay account.

Various points about this - at least as it is reported - are dreadful:

* one employee's account had access to copy all this info
* passwords were stored in a reversible form
* c. 2 months between the issue and letting customers know
* even now, no communication from Ebay
* no info on advice from law enforcement
* info on web site not clear as to what may have been compromised. Ebay 
accounts have various addresses associated with them. Which were hacked?

As the article says, "The danger goes beyond the internet, because some 
telephone banking services accept a date of birth and address to verify the 
identity of a customer."

James

Back to comp.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-22 17:38 +1000
  Re: Ebay hacked RS Wood <rsw@therandymon.com> - 2014-05-22 13:35 +0000
    Re: Ebay hacked Andy Burns <usenet.feb2014@adslpipe.co.uk> - 2014-05-24 14:32 +0100
  Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-22 15:59 +0000
    Re: Ebay hacked Anssi Saari <as@sci.fi> - 2014-05-23 17:06 +0300
      Re: Ebay hacked Rich <rich@example.com> - 2014-05-24 16:13 +0000
        Re: Ebay hacked Ben Bacarisse <ben.usenet@bsb.me.uk> - 2014-05-24 20:45 +0100
          Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-25 19:33 +1000
            Re: Ebay hacked Jerry Peters <jerry@example.invalid> - 2014-05-25 20:19 +0000
              Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-25 21:50 +0000
      Re: Ebay hacked Rich <rich@example.com> - 2014-05-24 16:53 +0000
        Re: Ebay hacked Anssi Saari <as@sci.fi> - 2014-05-24 21:12 +0300
          Re: Ebay hacked Rich <rich@example.com> - 2014-05-24 18:33 +0000
            Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-25 19:37 +1000
              Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-25 13:46 +0000
                Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-26 16:55 +1000
                Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-26 18:42 +0200
          Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-27 13:38 +0200
        Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-24 22:32 +0000
        Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-25 19:36 +1000
          Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-25 14:00 +0000
            Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-25 17:18 +0200
          Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-25 22:53 +0200
            Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-26 17:03 +1000
              Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-26 13:17 +0000
                Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-27 15:18 +1000
          Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-26 06:57 +0000
            Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-26 17:07 +1000
              Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-26 13:21 +0000
              Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-27 05:53 +0000
            Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-26 13:19 +0000
            Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-26 18:46 +0200
      Re: Ebay hacked "BartC" <bc@freeuk.com> - 2014-05-24 20:54 +0100
        Re: Ebay hacked Rich <rich@example.com> - 2014-05-24 20:24 +0000
        Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-24 22:35 +0000
  Re: Ebay hacked "James Harris" <james.harris.1@gmail.com> - 2014-05-23 00:28 +0100
    Re: Ebay hacked simple@machines.gopher - 2014-05-23 14:30 +0000
      Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-24 00:36 +1000
        Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-24 13:34 +0200
    Re: Ebay hacked mm0fmf <none@mailinator.com> - 2014-05-23 18:21 +0100
      Re: Ebay hacked Tim Streater <timstreater@greenbee.net> - 2014-05-23 18:39 +0100
        Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-24 16:29 +1000
      Re: Ebay hacked RS Wood <rsw@therandymon.com> - 2014-05-23 21:57 +0000
      Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-24 16:28 +1000
    Re: Ebay hacked "James Harris" <james.harris.1@gmail.com> - 2014-05-26 15:27 +0100
      Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-26 14:32 +0000

csiph-web