ebays been hit .. change passwords

KIPAX

Seriously Likeable
Suspended / Banned
Messages
21,370
Name
KIPAX Lancashire UK
Edit My Images
No
just google it.. its all over tech news ebay major security breach.. need to change passwords ASAP
 
That was nice of them:
The database, which was compromised between late February and early March, (MARCH ffs!) included eBay customers’ name, encrypted password, email address, physical address, phone number and date of birth. However, the database did not contain financial information or other confidential personal information. The company said that the compromised employee log-in credentials were first detected about two weeks ago. (2 WEEKS AGO! double ffs).

Changed mine just now, cheers buddy! :)
 
OMG! I hadnt read any of it.. just seen multiple agencies reporting it so decided it was real and changed mine.. you think they would look aftre us more and be a little more transparent the money they make out of us...
 
Just changed my password, thanks for the heads up (y)
 
Thanks for the heads up :ty:
 
Adobe, eBay ... highlights the need for regular password changes - these 'people' obviously have no regard for our security and simply keep these problems to themselves :bat:
 
these 'people' obviously have no regard for our security and simply keep these problems to themselves :bat:
okay they may have known that they had a breach 2 weeks (or whatever) ago but they may not have known the extent of the breach until now.

remember that someone capable of breaching these systems will leave little or no trace of what they did so picking apart the extent of the "damage", what they accessed (if anything), what they copied (if anything) etc will take some time.

Adobe/eBay/whoever isn't going to release a PR disaster statement that users sensitive data has been (potentially) compromised unless they're damn sure about it.

but yes it does highlight the need for regular password changes. people (i'll admit myself included) get complacent over these things.
 
Well I for one am still waiting for official notification!
 
Changed. As for having no regard, I suspect the sheer hassle of this kind would make them have a regard, but the size and complexity of the operation they maintain probably means there are vulnerabilities they are unaware or. Or it could have just been incompetence.
 
Phew... nearly had to contact the hackers so I could change my password! :)
 
Well just finished changing mine and the missus passwords, as it seems ebay has been broken into! But they say credit cards are safe, but surely if hackers have gained access, would they not be able to see those details ?
 
Are those details not protected by Paypal?

My eBay username is different to my Paypal email address log in. (passwords are different to but that seems irrelevant.)

Just logged in and this is what I got (for those that are interested) - it won't let me reach the change password stage:

View attachment 12090
 
Last edited:
Just checked, you can't even see your own card details from your Paypal account (except the last 4 digits).
 
I can't change my password :confused:

eBay said:
Page not available

Ebay is asking its users to reset their passwords due to the unauthorized access to our corporate information network. This may result in a delay of service due to the high traffic volume. We ask for your patience and that you return to eBay soon. In the meantime, please be assured that no activity can occur on your account until your password is reset.
 
Just checked, you can't even see your own card details from your Paypal account (except the last 4 digits).

When I log into ebay, I can see my last four credit card digits. Just if hackers have gained access at the back end, they just may see the full details !
 
Well I just signed in, and the only notification I got, was they were trying to sell me a hair dryer.
That's even funnier than it first appears to be :D
 
if they want my £3.54 in paypal they can have it ,about the same in the bank account i use for e/bay to .having been hit by scammers once i make sure its done via a back up nearly empty account .i started on there with nothing ,got nothing left but made a fortune in-between .:exit::wave::wave:
 
These databases of passwords have them encrypted, right?

I seem to remember something from a CompSci lecture about non reversible trapdoor algorithms. So as long as your password is long enough and can't be cracked by a dictionary assault (including Tolkien, Disney and obviously GOT dictionaries....) then it should be safe shouldn't it?

Or am I missing something here?
 
These databases of passwords have them encrypted, right?

I seem to remember something from a CompSci lecture about non reversible trapdoor algorithms. So as long as your password is long enough and can't be cracked by a dictionary assault (including Tolkien, Disney and obviously GOT dictionaries....) then it should be safe shouldn't it?

Or am I missing something here?

Not missing too much.... except our American cousins denied anybody creating an encryption Algorithm which could never be broken (I believe the Industry standard was going to be raised to 256bit level encryption but they insisted on 128) so if the CIA had an need to they could bust it. Al Qaida can only count to 128 ;)

That was years ago, but I wouldn't mind betting the principle still applies!
 
Back
Top