eBay Customers Targetted by Credit Card Scam

hether writes "Customers of the auction site eBay have been targeted by a site called ebayupdates.com. The site attempts to steal credit card details from eBay's 55 million customers. The SANS Institute Internet Storm Center issued the warning on this one. Info about the scam can be found on the BBC site, CNN, CNet, vnunet, and more. Funny enough there's no mention of this on the eBay site..."

Comments

Re:Yet another example of bad security

[le_banni]

You haven't read any of the articles, have you ?

Spam

[ottffssent]

Hm. That domain isn't on the whitelist for the email address I give out to likely-to-deluge-me-with-spam outfits. Such as ebay. So maybe I got it. Maybe not.

I keep hearing about the "death of email" because of spam. It's really not hard. Pay for a respectable email address and don't give it to *anyone*. Create forwarding addresses that you give out. Apply whitelists to the address(es) you use for commerce. Apply blacklists (or actual spam filters) to the addresses you use for friends, family, etc. Every few weeks I go through the ~1000 emails that got filtered out on the odd chance they're not spam, and delete them. It doesn't take an hour a day - it takes more like an hour a month.

Where's the mac people now?

[Psyko]

Hrm, seems like the friendly mac people will have their hands full now that it's widespread... Maybe we should let cnn know that the mac users can track down their fiend and get them intel and stuff.

http://apple.slashdot.org/article.pl?sid=02/12/1 2/ 2113222&mode=thread&tid=107

Re:ebay scam repayments

[Anonymous Coward]

COULD YOU PLEASE SIR CHECK IF I AM INN YOUR LIST :

MR Kenny Lingus
142 Baisley Blvd
11439 Jamaica NY

VISA 4109195739984714 09/04

THANK YOU VERU MUCH

ebayupdates.com slashdotted

[krystal_blade]

Yet another publicly sponsored Denial Of Service attack by slashdot.

krystal_blade

Re:Yet another example of bad security

[gazbo]

No, you don't use 2 way encryption, you use a one-way hash like an MD4 to securely store the CC number in a format that cannot be decrypted.

That way the CC number cannot be cracked even if the database is broken into, and ebay only needs to send the MD4 over to the banks for them to process. As I said, it's a perfectly common practice and well known to people who bother to learn about security rather than just guess at it.

Intel???

[Lemmeoutada Collecti]

What does Intel have to do with Mac users?

Re:Offtopic, Yes, But...

[misterhaan]

It should fall upon sites like ebay to educate their users, even just a little bit.

i have to disagree. in my opinion, there is already too much being done to save stupid people from themselves. most of these things really should be common sense, and maybe if we didn't have so many warnings for stupid people common sense wouldn't be as uncommon as it is.

did you know that those cardboard things you can put in your windshield to try to keep your car from heating up so much in the sun actually say something to the effect of "remove before driving?"