eBay hacked!

[John Connor]

Change your password!

http://www.forbes.com/sites/jamesly...ds-data-why-you-need-to-act/?partner=yahootix

 

[bruceb]

This hack happened in Feb 2014 and Ebay is now announcing it. Pathetic. (I did change my password to be on the safe side)

 

[John Connor]

Not only that but some dick head @ eBay got spear phished through his E-mail.

 

[smakme7757]

Not only that but some dick head @ eBay got spear phished through his E-mail.

Not exactly that hard to get caught out by a well designed phishing email.
When you get 10 to 15 or even more important emails each day the security guru in us tends to take a break.

 

[John Connor]

I get about 60 E-mails a day between 3 E-mail addresses and never lax my awareness of suspicious and not suppose to be in my inbox E-mail.

 

[Paperlantern]

I get about 60 E-mails a day between 3 E-mail addresses and never lax my awareness of suspicious and not suppose to be in my inbox E-mail.

60? I get 600.

 

[smakme7757]

I get about 60 E-mails a day between 3 E-mail addresses and never lax my awareness of suspicious and not suppose to be in my inbox E-mail.

Except that most of the email you get is mostly likely not internal corporate email where everything just looks the same. Targeted phishing and attacks are a completely different ballgame than the "general purpose" attacks that you get at home.

Someone has actually spent time tuning it to be as perfect as possible for the target. I wouldn't even say that I would never get tricked by something like that.

 

[JEDIYoda]

60? I get 600.

600? I get 6,000+

 

[nemesismk2]

I had already requested for my ebay account be deleted.

 

[FoxFifth]

Change your password!

http://www.forbes.com/sites/jamesly...ds-data-why-you-need-to-act/?partner=yahootix

Your May 22 post was 5 days earlier than the email I just received from eBay this morning!

 

[Chiefcrowe]

EBay Demonstrates How Not to Respond to a Huge Data Breach

http://www.wired.com/2014/05/ebay-demonstrates-how-not-to-respond-to-a-huge-data-breach

 

[Deathhorse]

how come the internet knew ebay was hacked before ebay did XD

 

[goobee]

how come the internet knew ebay was hacked before ebay did XD

Oh they knew.

 

[PliotronX]

600? I get 6,000+

6,000? I get tree fitty.

 

[JimKiler]

I am going to change my ebay password to be what ever button mashing i do. Then when i need to login i will do the reset password and do that everytime. It would be so secure that not even i know what button mashing password I have so no one could steal my password since i have made it a one time use password, anyone disagree?

 

[babcom]

I disagree.
If you don't get your browser to remember the password, how are you able to login?
If you get your browser to remember it, then it's possible that your PC could be hacked and the password stolen and decrypted. Unlikely but...
You could write it down...

 

[John Connor]

I use PWDhash. http://crypto.stanford.edu/PwdHash/

https://www.pwdhash.com/

 

[ussfletcher]

Or better yet have an application like LastPass actually generate new and unique keys for every site you go to. Not to plug LastPass too much but their security model is pretty decent. You store the passwords in your vault which is encrypted on your computer before being stored on LastPass's servers, you then retrieve the vault whenever you need to access it and decrypt it with your master key.

 

[John Connor]

If I don't have my USB drive I can't use LastPass on a library computer or some other computer. If I need my password I just Google PWDHash, enter the password and get it generated. One great thing that PWDHash does is help prevent phishing because the URL is used to generate the password and if the URL is wrong so will the password. Plus you can use the same password for all sites and each password will be different.

 

[ussfletcher]

If I don't have my USB drive I can't use LastPass on a library computer or some other computer. If I need my password I just Google PWDHash, enter the password and get it generated. One great thing that PWDHash does is help prevent phishing because the URL is used to generate the password and if the URL is wrong so will the password. Plus you can use the same password for all sites and each password will be different.

LastPass doesn't require local file storage, your master password decrypts the "vault".