Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




2984 posts

Uber Geek


# 146568 22-May-2014 08:10
Send private message

http://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=11259




Common sense is not as common as you think.


Create new topic
15554 posts

Uber Geek

Trusted
Subscriber

  # 1050856 22-May-2014 08:58
One person supports this post
Send private message

This is why I have a low security "I don't care if anyone uses my account" password, plus different complex passwords for every significant website - bank, paypal, amazon, anywhere with my credit card number.  I use a password store, KeePass2, on my PC/phone, sync'd by dropbox.

Banana?
4902 posts

Uber Geek

Subscriber

  # 1050914 22-May-2014 10:46
Send private message

Must be getting hammered.






 
 
 
 


2788 posts

Uber Geek


  # 1051811 23-May-2014 17:17
Send private message

And yet to receive any communication from eBay themselves. Even on their website I didn't see anything about it until I was already in the "change password" screen. Poor!

Changed my password anyway, changed it on PayPal as well as I'm not convinced that they're not using a shared database given that (AFAIK) one owns the other.





15325 posts

Uber Geek


  # 1051821 23-May-2014 17:24
Send private message

I have tried to reset mine, and it says it will email it. But 24 hours later no email, and I have tried it multiple times. So mine is stuck on my old password. Pretty poor password reset system they have got running.

Awesome
4871 posts

Uber Geek

Trusted
Subscriber

  # 1051835 23-May-2014 17:34
Send private message

I'm not going to bother resetting mine because a) it's unique to eBay and I don't use it for anything else and b) I have 2FA setup for eBay, so even if they can decode the encrypted password, it's useless to them without my 2FA token.




Twitter: ajobbins


2788 posts

Uber Geek


  # 1051839 23-May-2014 17:40
Send private message

I didn't even realise that eBay did 2FA, no obvious mention of it on their site unless you search for it - is it just this:

https://www.paypal.com/cgi-bin/webscr?cmd=xpt/Marketing_CommandDriven/securitycenter/PayPalSecurityKey-outside

Or is there an eBay-specific solution?

Paypal supposedly have either an App or will text you a code, but don't seem to offer that when I look on their site, they just offer the physical key (for US$30!) which is currently "not available".

My password is unique on both sites and is total multi-character gibberish so I'm not too worried.





5212 posts

Uber Geek

Trusted

  # 1051848 23-May-2014 18:01
Send private message

Changed mine. The 2FA was my cellphone which worked fine. I had no problems with the site.






Staying in Wellington. Check out my AirBnB in the Wellington CBD.  https://www.airbnb.co.nz/rooms/32019730  Mention GZ to get a 10% discount

 

System One: Popcorn Hour A200,  PS3 SuperSlim, NPVR and Plex Server running on Gigabyte Brix (Windows 10 Pro), Sony BDP-S390 BD player, Pioneer AVR, Raspberry Pi running Kodi and Plex, Panasonic 60" 3D plasma, Google Chromecast

System Two: Popcorn Hour A200 ,  Oppo BDP-80 BluRay Player with hardware mode to be region free, Vivitek HD1080P 1080P DLP projector with 100" screen, Denon AVRS730H 7.2 Channel Dolby Atmos/DTS-X AV Receiver, Samsung 4K player, Google Chromecast, Odroid C2 running Kodi and Plex

 

 


 
 
 
 


Awesome
4871 posts

Uber Geek

Trusted
Subscriber

  # 1051855 23-May-2014 18:54
Send private message

Just download the Symantec VIP app for free from your respective App Store, and just use the credential ID. Been using it for both eBay and PayPal for about a year or more now




Twitter: ajobbins


Stu

Hammered
5326 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  # 1051863 23-May-2014 19:07
Send private message

Works fine with Ebay, but PayPal won't let me activate it.

Please Contact Customer Service

Error Message
The Security Key is currently not available. Please try again later.

Please contact Customer Service 1-888-221-1161 for help with activating your PayPal Security Key.

8257 posts

Uber Geek

Subscriber

  # 1052311 24-May-2014 15:53
Send private message

mattwnz: I have tried to reset mine, and it says it will email it. But 24 hours later no email, and I have tried it multiple times. So mine is stuck on my old password. Pretty poor password reset system they have got running.

 

I had to request a second password reset to get the email..




Regards,

Old3eyes


15325 posts

Uber Geek


  # 1052371 24-May-2014 16:48
Send private message

old3eyes:
mattwnz: I have tried to reset mine, and it says it will email it. But 24 hours later no email, and I have tried it multiple times. So mine is stuck on my old password. Pretty poor password reset system they have got running.

I had to request a second password reset to get the email..

 

Thanks. I have tried it 5 times over the last few days, and nothing has come through at all.

15554 posts

Uber Geek

Trusted
Subscriber

  # 1052390 24-May-2014 17:20
Send private message

Took me 30 seconds total.

15325 posts

Uber Geek


  # 1052398 24-May-2014 17:27
Send private message

timmmay: Took me 30 seconds total.

 

I suspect my email provider is blocking ebay emails.

587 posts

Ultimate Geek


  # 1053971 26-May-2014 22:19
Send private message

I just got an email from eBay about it, it only took 3 days.

 


Dear eBay Member,

 


To help ensure customers' trust and security on eBay, I am asking all eBay users to change their passwords.

 


Here's why: Recently, our company discovered a cyberattack on our corporate information network. This attack compromised a database containing eBay user passwords.

 


What's important for you to know: We have no evidence that your financial information was accessed or compromised. And your password was encrypted.

 


What I ask of you:
Go to eBay and change your password. If you changed your password on May 21 or later, we do not need you to take any additional action at this time.

 


Changing your password may be inconvenient. I realize that. We are doing everything we can to protect your data and changing your password is an extra precautionary step, in addition to the other security measures we have in place.

 


If you have only visited eBay as a guest user, we do not have a password on file.

 


If you used the same eBay password on any other site, I encourage you to change your password on those sites too. And if you are a PayPal user, we have no evidence that this attack affected your PayPal account or any PayPal financial information, which is encrypted and stored on a separate secure network.

 


Here are other steps we are taking:

 

  • As always, we have strong protections in place for both buyers and sellers in the event of any unauthorized activity on your account.
  • We are applying additional security to protect our customers.
  • We are working with law enforcement and leading security experts to aggressively investigate the matter.

Here's what we know: This attack occurred between late February and early March and resulted in unauthorized access to a database of eBay users that includes customers' name, encrypted password, email address, physical address, phone number and date of birth.

 


However, the file did not contain financial information. And, after conducting extensive testing and analysis of our systems, we have no evidence that any customer financial or credit card information was involved. We also have no indication of a significant spike in fraudulent activity on our site.

 


We apologize for any inconvenience or concern that this situation may cause you. As a global marketplace, nothing is more important to eBay than the security and trust of our customers. We know our customers have high expectations of us, and we are committed to ensuring a safe and secure online experience for you on any connected device.

 








Stu

Hammered
5326 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  # 1054075 27-May-2014 08:38
Send private message

Only just received that email this morning. They don't seem to want to accept how potentially serious this is. There's enough personal information involved to attempt identity theft. It's happened before to a Wired reporter (from memory) and they started off with just this information.

Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Vodafone integrates eSIM into device and wearable roadmap
Posted 17-Jan-2020 09:45


Do you need this camera app? Group investigates privacy implications
Posted 16-Jan-2020 03:30


JBL launches headphones range designed for gaming
Posted 13-Jan-2020 09:59


Withings introduces ScanWatch wearable combining ECG and sleep apnea detection
Posted 9-Jan-2020 18:34


NZ Police releases public app
Posted 8-Jan-2020 11:43


Suunto 7 combine sports and smart features on new smartwatch generation
Posted 7-Jan-2020 16:06


Intel brings innovation with technology spanning the cloud, network, edge and PC
Posted 7-Jan-2020 15:54


AMD announces high performance desktop and ultrathin laptop processors
Posted 7-Jan-2020 15:42


AMD unveils four new desktop and mobile GPUs including AMD Radeon RX 5600
Posted 7-Jan-2020 15:32


Consolidation in video streaming market with Spark selling Lightbox to Sky
Posted 19-Dec-2019 09:09


Intel introduces cryogenic control chip to enable quantum computers
Posted 10-Dec-2019 21:32


Vodafone 5G service live in four cities
Posted 10-Dec-2019 08:30


Samsung Galaxy Fold now available in New Zealand
Posted 6-Dec-2019 00:01


NZ company oDocs awarded US$ 100,000 Dubai World Expo grant
Posted 5-Dec-2019 16:00


New Zealand Rugby Selects AWS-Powered Analytics for Deeper Game Insights
Posted 5-Dec-2019 11:33



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.