So, I just got off the phone with eBay regarding the security problem I had this weekend.....VERY SC
Rampage
Posts: 9,489 ✭✭✭✭✭
I inquired about why when I would put my password in, a screen would come up with the 4 digits and say my user info was not valid. Their answer??
According to the lady I spoke with, if you try to input your password too many times incorrectly, then this security measure takes place. I told her I never make mistakes and that I am perfect.
Just kidding. I told here when I log on, I click the box that says keep me logged in so I do not have to keep logging in.
While I was on the phone, she was able to tell me that on Saturday, which is when this happened, I or someone (I know it was the someone), tried to log onto my account 274 times! Each of those times was an unsuccessful log-in which is why the security took place. She had me try to log on while I was on the phone with her and it no longer did it. She said it usually stops that measure after 24 hours.
Just something for people to think about. I think it is very scary!
Regards, Richard.
According to the lady I spoke with, if you try to input your password too many times incorrectly, then this security measure takes place. I told her I never make mistakes and that I am perfect.
Just kidding. I told here when I log on, I click the box that says keep me logged in so I do not have to keep logging in.While I was on the phone, she was able to tell me that on Saturday, which is when this happened, I or someone (I know it was the someone), tried to log onto my account 274 times! Each of those times was an unsuccessful log-in which is why the security took place. She had me try to log on while I was on the phone with her and it no longer did it. She said it usually stops that measure after 24 hours.
Just something for people to think about. I think it is very scary!
Regards, Richard.
0
Comments
Tom
Your best protection is to use a password of random characters, and make sure you don't use the same password on any other site. A password like %87zj#@&H would be darn near impossible to guess.
New collectors, please educate yourself before spending money on coins; there are people who believe that using numismatic knowledge to rip the naïve is what this hobby is all about.
Did they give you any indication of the timespan within which the 274 attempts occurred? If it was over a lengthy period of time, indicating it was done manually, it was likely just some idiot and it's little to worry about. If it happened within a span of a minute or two, indicating a 'bot or a script engaging in a brute force attempt, could be a bit more of a concern.
Russ, NCNE
karlgoetzmedals.com
secessionistmedals.com
Russ.......The lady I spoke with did not give a time frame other than it had happened that day. Now, I was trying to log on at about 8:00 in the morning. So, whatever that means, who knows.
I now changed my password to include more special characters than I had before. Before, I had two special characters and now I have 4.
But, after 274 guesses, if they did not guess it by then, then I doubt they ever would have.
As a seller, I have 100% positive out of 355 +/- transactions with the majority being as a seller. The could list high dollar items, have the money sent to them, and then run leaving me to deal with it.
Cameron Kiefer
That is one FUNNY image in your sig line. Thanks!
I would have to say yes, I am happy with the security measure now that I know it only last 24 hours. In other words, if someone is trying to hack my account, then this measure is a good measure, although I originally did not know what to think about it.
Someone mentioned that they might be watching what I search for, bid on, etc. just as a survey, because that is what someone else thought.
I did not like that because it is not anyone's business what kind of stuff I am looking up or bidding on. But, now that I know it was for the reason mentioned, then I am fine with that.
Richard.
<< <i>A password like %87zj#@&H would be darn near impossible to guess. >>
Damn - now I have to change my password!
Even hotmail shuts down your account, temporarily, if you attempt an incorrect password 12 times and fail.
ATMs do this too with your PIN. After so many (single digit, I believe) attempts your card is sucked up into the machine!
Really, who doesn't on ocassion mess up and need to retype a password, but then who messes it up ten times in a row?
peacockcoins
If the software is interfaced with their web browser(and they are no doubt proxied at the time)then the software will type in the password attempt and hit enter faster than most of us could type cat.
It's not that hard to develop a proggie that will attempt and re-attempt the log-on without additional input from the user. In fact, it could be attempting the same thing on several different accounts at the same time.
eBay has very, very good security and the numbers you mentioned will bamboozle the cracker program. At least untill they figure a way around that.
While I don't know about eBay in particular, I'd wager that they put quite a large amount of their capitol into security, without that they would be out of business.
Yeah, I'm an IT guy, but some of us do wear white hats.
John Marnard Keynes, The Economic Consequences of the Peace, 1920, page 235ff