Ebay hacked - passwords stolen.

[tlgerdes (Trevor)]

http://www.itnews.com.au/News/386139...ily_newsletter

Login and change your Ebay passwords.

[OzStarGazer]

Done. (Thanks for the link.)

[Octane (Humayun)]

Thanks, Trevor. Have updated my details and alerted family. H

[lacad01 (Adam)]

Bother! thanks for the info

[Pinwheel (Doug)]

Haven't changed my ebay password for 10 years. Just done it now for the first time.

[expon (Jas)]

Probably not much point as now they have enough personal details to pretty much get access to anything of yours they want. Tie that in with every other critical information leak of the last few years (Sony, adobe, heartbleed) and there is enough compromised information out there that secret questions won't keep u safe anymore.

[Starless (Brian)]

Many thanks!!!

[gary]

http://pages.ebay.com/help/account/change-password.html

[stephenb (Stephen)]

No alerts or messages from eBay? Slack

[astroron (Ron)]

Originally Posted by gary

http://pages.ebay.com/help/account/change-password.html

Thanks Gary.
Done
Cheers

[Pinwheel (Doug)]

Originally Posted by expon

Probably not much point as now they have enough personal details to pretty much get access to anything of yours they want. Tie that in with every other critical information leak of the last few years (Sony, adobe, heartbleed) and there is enough compromised information out there that secret questions won't keep u safe anymore.

I don't use simplistic prompts in my passwords. I'm a lot more savey than that, and I don't use things like 1234, password or qwerty either....

[AstralTraveller (David)]

Originally Posted by Pinwheel

I don't use simplistic prompts in my passwords. I'm a lot more savey than that, and I don't use things like 1234, password or qwerty either....

I use p@55w0rd They'll never guess that!

It seems the information was lost months ago, so I suspect any damage has been done - but of course I'll change anyway.

[Astro_Bot]

Thanks for the tip.

At least I never use the same password twice (for anything important at least).

I'm disappointed that there's no e-mail from eBay alerting users to this problem. They're certainly happy enough to send marketing e-mails.

[mithrandir (Andrew)]

Originally Posted by Astro_Bot

I'm disappointed that there's no e-mail from eBay alerting users to this problem. They're certainly happy enough to send marketing e-mails.

Emailing people is counterproductive. Especially so if they include a link to the password change page. It takes more intelligence than the average user to tell the difference between a real email and a phish.

Better to expire passwords and make people change them at next logon with a two factor process.

And store passwords as hashes rather than encrypted which is what e-bay did. It means they can't tell you what your password is if you forget it, but is far more secure.

[Astro_Bot]

I wouldn't expect a link in the e-mail. But my disappointment stands. Many people don't read or watch news, and I wouldn't have known if not for this thread.

[Pinwheel (Doug)]

Originally Posted by Astro_Bot

I wouldn't expect a link in the e-mail. But my disappointment stands. Many people don't read or watch news, and I wouldn't have known if not for this thread.

It's been on ABC 24 all day so far..

[Astro_Bot]

Originally Posted by Pinwheel

It's been on ABC 24 all day so far..

Sigh.

Originally Posted by Astro_Bot

Many people don't read or watch news

[Pinwheel (Doug)]

Originally Posted by Astro_Bot

Sigh.

I was well aware of your comment Astro Boy, I was just adding a comment that it's now on the news..

[BlackWidow (Mardy)]

I have more worry about EBay as a Company to be honest.. The most untrusting Business I have ever had dealings with. As a seller for 14 years I have had my fair share of troubles with E-Bay and thier policy...

Its most likley that the breach happened within thier own ranks.

[ianB (Ian)]

I just changed my password and ebay had a box saying please change your password, they should have given me that message earlier.