Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




2392 posts

Uber Geek
+1 received by user: 507


Topic # 146568 22-May-2014 08:10
Send private message

http://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=11259

Create new topic
13165 posts

Uber Geek
+1 received by user: 2191

Trusted
Subscriber

  Reply # 1050856 22-May-2014 08:58
One person supports this post
Send private message

This is why I have a low security "I don't care if anyone uses my account" password, plus different complex passwords for every significant website - bank, paypal, amazon, anywhere with my credit card number.  I use a password store, KeePass2, on my PC/phone, sync'd by dropbox.




AWS Certified Solution Architect Professional, Sysop Administrator Associate, and Developer Associate
TOGAF certified enterprise architect
Professional photographer


Banana?
4003 posts

Uber Geek
+1 received by user: 835

Subscriber

  Reply # 1050914 22-May-2014 10:46
Send private message

Must be getting hammered.






 
 
 
 


2771 posts

Uber Geek
+1 received by user: 118


  Reply # 1051811 23-May-2014 17:17
Send private message

And yet to receive any communication from eBay themselves. Even on their website I didn't see anything about it until I was already in the "change password" screen. Poor!

Changed my password anyway, changed it on PayPal as well as I'm not convinced that they're not using a shared database given that (AFAIK) one owns the other.





13230 posts

Uber Geek
+1 received by user: 1564


  Reply # 1051821 23-May-2014 17:24
Send private message

I have tried to reset mine, and it says it will email it. But 24 hours later no email, and I have tried it multiple times. So mine is stuck on my old password. Pretty poor password reset system they have got running.

Awesome
4769 posts

Uber Geek
+1 received by user: 1054

Trusted
Subscriber

  Reply # 1051835 23-May-2014 17:34
Send private message

I'm not going to bother resetting mine because a) it's unique to eBay and I don't use it for anything else and b) I have 2FA setup for eBay, so even if they can decode the encrypted password, it's useless to them without my 2FA token.




Twitter: ajobbins


2771 posts

Uber Geek
+1 received by user: 118


  Reply # 1051839 23-May-2014 17:40
Send private message

I didn't even realise that eBay did 2FA, no obvious mention of it on their site unless you search for it - is it just this:

https://www.paypal.com/cgi-bin/webscr?cmd=xpt/Marketing_CommandDriven/securitycenter/PayPalSecurityKey-outside

Or is there an eBay-specific solution?

Paypal supposedly have either an App or will text you a code, but don't seem to offer that when I look on their site, they just offer the physical key (for US$30!) which is currently "not available".

My password is unique on both sites and is total multi-character gibberish so I'm not too worried.





4689 posts

Uber Geek
+1 received by user: 75

Trusted

  Reply # 1051848 23-May-2014 18:01
Send private message

Changed mine. The 2FA was my cellphone which worked fine. I had no problems with the site.






System One: Popcorn Hour A200,  PS3 SuperSlim, NPVR and Plex Server running on Gigabyte Brix (Windows 10 Pro), Sony BDP-S390 BD player, Pioneer AVR, Raspberry Pi running Kodi and Plex, Panasonic 60" 3D plasma, Google Chromecast

System Two: Popcorn Hour A200 ,  Oppo BDP-80 BluRay Player with hardware mode to be region free, Vivitek HD1080P 1080P DLP projector with 100" screen. Harman Kardon HK AVR 254 7.1 receiver, Samsung 4K player, Google Chromecast

 


My Google+ page 

 

 

 

https://plus.google.com/+laurencechiu

 

 


Awesome
4769 posts

Uber Geek
+1 received by user: 1054

Trusted
Subscriber

  Reply # 1051855 23-May-2014 18:54
Send private message

Just download the Symantec VIP app for free from your respective App Store, and just use the credential ID. Been using it for both eBay and PayPal for about a year or more now




Twitter: ajobbins


Stu

Hammered
4726 posts

Uber Geek
+1 received by user: 946

Moderator
Trusted
Subscriber

  Reply # 1051863 23-May-2014 19:07
Send private message

Works fine with Ebay, but PayPal won't let me activate it.

Please Contact Customer Service

Error Message
The Security Key is currently not available. Please try again later.

Please contact Customer Service 1-888-221-1161 for help with activating your PayPal Security Key.

7617 posts

Uber Geek
+1 received by user: 720

Subscriber

  Reply # 1052311 24-May-2014 15:53
Send private message

mattwnz: I have tried to reset mine, and it says it will email it. But 24 hours later no email, and I have tried it multiple times. So mine is stuck on my old password. Pretty poor password reset system they have got running.

 

I had to request a second password reset to get the email..




Regards,

Old3eyes


13230 posts

Uber Geek
+1 received by user: 1564


  Reply # 1052371 24-May-2014 16:48
Send private message

old3eyes:
mattwnz: I have tried to reset mine, and it says it will email it. But 24 hours later no email, and I have tried it multiple times. So mine is stuck on my old password. Pretty poor password reset system they have got running.

I had to request a second password reset to get the email..

 

Thanks. I have tried it 5 times over the last few days, and nothing has come through at all.

13165 posts

Uber Geek
+1 received by user: 2191

Trusted
Subscriber

  Reply # 1052390 24-May-2014 17:20
Send private message

Took me 30 seconds total.




AWS Certified Solution Architect Professional, Sysop Administrator Associate, and Developer Associate
TOGAF certified enterprise architect
Professional photographer


13230 posts

Uber Geek
+1 received by user: 1564


  Reply # 1052398 24-May-2014 17:27
Send private message

timmmay: Took me 30 seconds total.

 

I suspect my email provider is blocking ebay emails.

563 posts

Ultimate Geek
+1 received by user: 215


  Reply # 1053971 26-May-2014 22:19
Send private message

I just got an email from eBay about it, it only took 3 days.

 


Dear eBay Member,

 


To help ensure customers' trust and security on eBay, I am asking all eBay users to change their passwords.

 


Here's why: Recently, our company discovered a cyberattack on our corporate information network. This attack compromised a database containing eBay user passwords.

 


What's important for you to know: We have no evidence that your financial information was accessed or compromised. And your password was encrypted.

 


What I ask of you:
Go to eBay and change your password. If you changed your password on May 21 or later, we do not need you to take any additional action at this time.

 


Changing your password may be inconvenient. I realize that. We are doing everything we can to protect your data and changing your password is an extra precautionary step, in addition to the other security measures we have in place.

 


If you have only visited eBay as a guest user, we do not have a password on file.

 


If you used the same eBay password on any other site, I encourage you to change your password on those sites too. And if you are a PayPal user, we have no evidence that this attack affected your PayPal account or any PayPal financial information, which is encrypted and stored on a separate secure network.

 


Here are other steps we are taking:

 

  • As always, we have strong protections in place for both buyers and sellers in the event of any unauthorized activity on your account.
  • We are applying additional security to protect our customers.
  • We are working with law enforcement and leading security experts to aggressively investigate the matter.

Here's what we know: This attack occurred between late February and early March and resulted in unauthorized access to a database of eBay users that includes customers' name, encrypted password, email address, physical address, phone number and date of birth.

 


However, the file did not contain financial information. And, after conducting extensive testing and analysis of our systems, we have no evidence that any customer financial or credit card information was involved. We also have no indication of a significant spike in fraudulent activity on our site.

 


We apologize for any inconvenience or concern that this situation may cause you. As a global marketplace, nothing is more important to eBay than the security and trust of our customers. We know our customers have high expectations of us, and we are committed to ensuring a safe and secure online experience for you on any connected device.

 








Stu

Hammered
4726 posts

Uber Geek
+1 received by user: 946

Moderator
Trusted
Subscriber

  Reply # 1054075 27-May-2014 08:38
Send private message

Only just received that email this morning. They don't seem to want to accept how potentially serious this is. There's enough personal information involved to attempt identity theft. It's happened before to a Wired reporter (from memory) and they started off with just this information.

Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Vodafone TV — television in the cloud
Posted 17-Oct-2017 19:29


Nokia 8 review: Classy midrange pure Android phone
Posted 16-Oct-2017 07:27


Why carriers might want to embrace Commerce Commission study, MVNOs
Posted 13-Oct-2017 09:42


Fitbit launches Ionic, its health and fitness smartwatch
Posted 12-Oct-2017 15:52


Xero launches machine learning automation to improve coding accuracy for small businesses
Posted 12-Oct-2017 15:45


Bank of New Zealand uses Intel AI to detect financial crime
Posted 12-Oct-2017 15:39


Sony launches Xperia XZ1, a smartphone with real-time 3D capture
Posted 11-Oct-2017 10:26


Notes on Nokia’s phone comeback
Posted 10-Oct-2017 10:06


Air New Zealand begins Inflight Wi-Fi rollout
Posted 9-Oct-2017 20:16


The latest mobile phones in perspective
Posted 9-Oct-2017 18:34


Review: Acronis True Image 2018 — serious backup
Posted 8-Oct-2017 11:22


Lenovo launches ThinkPad Anniversary Edition 25
Posted 7-Oct-2017 23:16


Less fone, more tech as Vodafone gets brand make-over
Posted 6-Oct-2017 08:16


API Talent Achieves AWS MSP Partner Status
Posted 5-Oct-2017 21:20


Stellar Consulting Group now a Domo Partner
Posted 5-Oct-2017 21:03



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.