Rant: Paypal Security Key and Ebay

[Gillbot]

Originally posted by: SunnyD

Originally posted by: daveshel
The only safe paypal account is a closed paypal account.

Here here! :beer:

I'm about two seconds away from closing my Paypal and Ebay accounts all together. Or I could go back to my original setup of using an empty "paypal and Ebay only" bank account with no CC's attached and only deposit the money I need to use.

 

[EagleKeeper]

Originally posted by: Gillbot

Originally posted by: SunnyD

Originally posted by: daveshel
The only safe paypal account is a closed paypal account.

Here here! :beer:

I'm about two seconds away from closing my Paypal and Ebay accounts all together. Or I could go back to my original setup of using an empty "paypal and Ebay only" bank account with no CC's attached and only deposit the money I need to use.

I keep my paypal close to zero.

If I need something, I let the recipient know that I need to fund the account.

 

[Gillbot]

I keep my paypal account at zero all the time but it's attached to my bank account. I used to have a separate account that was for paypal/ebay use only. It had a $20 savings account to keep it open and a $0 balance checking account attached to paypal. If I wanted to buy something I would deposit the funds then use paypal but after I moved away I closed that account. I should have just kept it open and left it attached.

 

[SunnyD]

Google Checkout for life!

 

[Gillbot]

So I come home from work to find 11 new bids on my account after ebay "secured it" for me. GAH, ebay security is a complete joke.

 

[pcslookout]

Your password is not strong enough I bet.

 

[pcslookout]

Originally posted by: Gillbot

Originally posted by: SunnyD

Originally posted by: daveshel
The only safe paypal account is a closed paypal account.

Here here! :beer:

I'm about two seconds away from closing my Paypal and Ebay accounts all together. Or I could go back to my original setup of using an empty "paypal and Ebay only" bank account with no CC's attached and only deposit the money I need to use.

This is why I don't shop on ebay and plan on never shopping there. Plenty people I talked to do not trust ebay either. I refuse to use paypal as well because it is part of ebay.

 

[SlickSnake]

Here is most likely how it happened.

You were logged into Ebay and or Paypal at some point and were looking at some item on Ebay. Then you decided to do a search for the item on Google or some other shopping search engine to see if the price was good on Ebay.

At this point the account was compromised by some sleazy web site set up primarily to gain data from your browser cache files or active and open secured web page files. This is the same password hack trick that happens when people want to by gold or credits for some game online while their game is active in the background and the browser is open while they buy the credits.

This is a known security problem with IE and various MS operating systems. I believe it is also a problem with other browsers, but just not as common. It is a hard security hole to fix because of one way the secured cached data is accessed by other unsecured websites. The scamming websites are using a modified browser developers tool to access the data, so you will have a hard time stopping it with a firewall or antivirus. Everytime Microsoft fixes it, the scammers manage to modify the tool again and get around the fix. There are also known spyware and viruses that can do the same thing.

Just now, I got a popup from MS about 5 different security fixes they are now applying to XP, and 2 of them involve IE directly. They all allow some kind of remote system access and compromises.

 

[pcslookout]

Originally posted by: SlickSnake
Here is most likely how it happened.

You were logged into Ebay and or Paypal at some point and were looking at some item on Ebay. Then you decided to do a search for the item on Google or some other shopping search engine to see if the price was good on Ebay.

At this point the account was compromised by some sleazy web site set up primarily to gain data from your browser cache files or active and open secured web page files. This is the same password hack trick that happens when people want to by gold or credits for some game online while their game is active in the background and the browser is open while they buy the credits.

This is a known security problem with IE and various MS operating systems. I believe it is also a problem with other browsers, but just not as common. It is a hard security hole to fix because of one way the secured cached data is accessed by other unsecured websites. The scamming websites are using a modified browser developers tool to access the data, so you will have a hard time stopping it with a firewall or antivirus. Everytime Microsoft fixes it, the scammers manage to modify the tool again and get around the fix. There are also known spyware and viruses that can do the same thing.

Just now, I got a popup from MS about 5 different security fixes they are now applying to XP, and 2 of them involve IE directly. They all allow some kind of remote system access and compromises.

Wow that is interesting does this pertain to other browsers as well like firefox ? Doesn't really matter though I like to keep a clean browser without to much clutter open at once. I always thought this kind of thing could happen so I like to keep only the things I need right that second open.

 

[randay]

what size underwear?

 

[Gillbot]

Originally posted by: pcslookout
Your password is not strong enough I bet.

I bet that it is. I was told, If I can't remember it and have to write it down, it should suffice.

Originally posted by: SlickSnake
Here is most likely how it happened.

You were logged into Ebay and or Paypal at some point and were looking at some item on Ebay. Then you decided to do a search for the item on Google or some other shopping search engine to see if the price was good on Ebay.

At this point the account was compromised by some sleazy web site set up primarily to gain data from your browser cache files or active and open secured web page files. This is the same password hack trick that happens when people want to by gold or credits for some game online while their game is active in the background and the browser is open while they buy the credits.

This is a known security problem with IE and various MS operating systems. I believe it is also a problem with other browsers, but just not as common. It is a hard security hole to fix because of one way the secured cached data is accessed by other unsecured websites. The scamming websites are using a modified browser developers tool to access the data, so you will have a hard time stopping it with a firewall or antivirus. Everytime Microsoft fixes it, the scammers manage to modify the tool again and get around the fix. There are also known spyware and viruses that can do the same thing.

Just now, I got a popup from MS about 5 different security fixes they are now applying to XP, and 2 of them involve IE directly. They all allow some kind of remote system access and compromises.

That is entirely possible

Originally posted by: randay
what size underwear?

Varied

IMHO, it was probably someone buying random stuff to prove they took over. Today they decided laptops, Ipods and accessories were better than mens thong underpants.

 

[pcslookout]

Dear god.

 

[Gillbot]

Well, so far so good! It's been a couple of days and no more underpants have been purchased!

 

[Pabster]

Originally posted by: daveshel
The only safe paypal account is a closed paypal account.

And that's not even safe.

Avoid PayPal at all costs.

PS: The 'Security Key' is a joke. They should REQUIRE it for login, not allow you to answer a security question to bypass it. Save your $5.

 

[Gillbot]

Originally posted by: Pabster

Originally posted by: daveshel
The only safe paypal account is a closed paypal account.

And that's not even safe.

Avoid PayPal at all costs.

PS: The 'Security Key' is a joke. They should REQUIRE it for login, not allow you to answer a security question to bypass it. Save your $5.

Mine was free so it wasn't a bad deal but basically the thing is useless.