Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
| From | Rich <rich@example.com> |
|---|---|
| Newsgroups | comp.misc |
| Subject | Re: Ebay hacked |
| Date | 2014-05-24 18:33 +0000 |
| Organization | My Linux Box |
| Message-ID | <llqolv$fvf$1@dont-email.me> (permalink) |
| References | <bu5nskFnom7U1@mid.individual.net> <slrnlns7m5.scb.g.kreme@amelia.local> <vg3oayn5gh3.fsf@coffee.modeemi.fi> <llqipl$59h$1@dont-email.me> <vg3k39b59lm.fsf@coffee.modeemi.fi> |
Anssi Saari <as@sci.fi> wrote: > Rich <rich@example.com> writes: > > Anssi Saari <as@sci.fi> wrote: > >> Lewis <g.kreme@gmail.com.dontsendmecopies> writes: > > > >> > Hard to say, but Fleabay has *always* been incompetent. > > > >> Now ebay apparently botched the password reset page too by not allowing > >> pasting from the clipboard. Ars writes about it at > >> http://arstechnica.com/security/2014/05/after-the-breach-ebays-flawed-password-reset-leaves-much-to-be-desired/ > > > > Actually, PRIMARY selection paste via middle-mouse-button in X-windows > > under Linux works just fine, even given ebay's stupid attempt to block > > copy/paste. > Interesting. I just tried changing my password again and in fact both > middle mouse and Ctrl-V paste worked now. When I last tried, the right click -> paste context menu was blocked, but middle mouse paste worked. I just presumed ebay had designed a windows centric block, and therefore X's PRIMARY slipped through their javascript blockade. > Actually one ars comment said there are two forms so maybe I just got > lucky and got the pasting allowed one? It is also possible that feedback (or pitchforks) from the ARS posting caused them to quickly modify the form. > The one I got now also specifies the allowed chars and length > clearly: > "Your password must be 6 to 20 characters long with a combination of > at least 2 of the following: uppercase letters, lowercase letters, > numbers or symbols (!@#$%^*-_+=)." > > Caring about specific symbols in the password implies they are not > > following proper password storage models. > That much has been clear from the start... It would be nice if they > explained what they were doing before and what they're doing now. I'd > guess they're probably doing the same thing they were and maybe planning > something approaching the rudiments of proper storage later or never. Sadly, given how many dev's there are that have no idea how to securely handle password storage, I fear that "never" is more likely when combined with the phrase "proper storage".
Back to comp.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-22 17:38 +1000
Re: Ebay hacked RS Wood <rsw@therandymon.com> - 2014-05-22 13:35 +0000
Re: Ebay hacked Andy Burns <usenet.feb2014@adslpipe.co.uk> - 2014-05-24 14:32 +0100
Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-22 15:59 +0000
Re: Ebay hacked Anssi Saari <as@sci.fi> - 2014-05-23 17:06 +0300
Re: Ebay hacked Rich <rich@example.com> - 2014-05-24 16:13 +0000
Re: Ebay hacked Ben Bacarisse <ben.usenet@bsb.me.uk> - 2014-05-24 20:45 +0100
Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-25 19:33 +1000
Re: Ebay hacked Jerry Peters <jerry@example.invalid> - 2014-05-25 20:19 +0000
Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-25 21:50 +0000
Re: Ebay hacked Rich <rich@example.com> - 2014-05-24 16:53 +0000
Re: Ebay hacked Anssi Saari <as@sci.fi> - 2014-05-24 21:12 +0300
Re: Ebay hacked Rich <rich@example.com> - 2014-05-24 18:33 +0000
Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-25 19:37 +1000
Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-25 13:46 +0000
Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-26 16:55 +1000
Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-26 18:42 +0200
Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-27 13:38 +0200
Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-24 22:32 +0000
Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-25 19:36 +1000
Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-25 14:00 +0000
Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-25 17:18 +0200
Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-25 22:53 +0200
Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-26 17:03 +1000
Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-26 13:17 +0000
Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-27 15:18 +1000
Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-26 06:57 +0000
Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-26 17:07 +1000
Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-26 13:21 +0000
Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-27 05:53 +0000
Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-26 13:19 +0000
Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-26 18:46 +0200
Re: Ebay hacked "BartC" <bc@freeuk.com> - 2014-05-24 20:54 +0100
Re: Ebay hacked Rich <rich@example.com> - 2014-05-24 20:24 +0000
Re: Ebay hacked Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-05-24 22:35 +0000
Re: Ebay hacked "James Harris" <james.harris.1@gmail.com> - 2014-05-23 00:28 +0100
Re: Ebay hacked simple@machines.gopher - 2014-05-23 14:30 +0000
Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-24 00:36 +1000
Re: Ebay hacked Paul Sture <nospam@sture.ch> - 2014-05-24 13:34 +0200
Re: Ebay hacked mm0fmf <none@mailinator.com> - 2014-05-23 18:21 +0100
Re: Ebay hacked Tim Streater <timstreater@greenbee.net> - 2014-05-23 18:39 +0100
Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-24 16:29 +1000
Re: Ebay hacked RS Wood <rsw@therandymon.com> - 2014-05-23 21:57 +0000
Re: Ebay hacked Sylvia Else <sylvia@not.at.this.address> - 2014-05-24 16:28 +1000
Re: Ebay hacked "James Harris" <james.harris.1@gmail.com> - 2014-05-26 15:27 +0100
Re: Ebay hacked Rich <rich@example.invalid> - 2014-05-26 14:32 +0000
csiph-web