Slashdot Mirror
Hacker May Be Exposing eBay Back Door
pacopico writes "A hacker specializing in eBay cracks has once again managed to masquerade as a company official on the site's message boards, according to The Register. A company spokesman denies that 'Vladuz's' repeated assaults on eBay point to a larger problem with the site's security. Of course, eBay two days ago claimed to have found a way to block Vladuz altogether, only to see him pop up again. The hacker himself made comments indicating that the company's email servers are connected somehow to the financial information eBay hosts."
The hacker himself made comments indicating that the company's email servers are connected somehow to the financial information eBay hosts.
$100 says this guy has a huge short on ebay stock.
The theory of relativity doesn't work right in Arkansas.
Maybe ebay should just pay the guy to tell them how to fix their system and be done with it. You know that this will all end with an exploit for ebay being discovered and someone getting sued.
...eBay is just a venue for people to exchange items, such as malicious code into an unexpecting user's browser.
When will they learn to do something simple like disallow META tags in item descriptions to stop redirects to sites with malicious code, rather than to hide such things and disavow any responsibility.
Sounds like the author has an anal fixation to me!
You just know what's gonna get posted soon...
- None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
Your choice in Operating System does little to mitigate bad coding. eBay has never been known for their technical wizardry and coding sophistication. It wouldn't surprise me if their back doors were wide open. (If you knew where to look.) For example, instead of having secure B2B messaging channels between different offices and departments, they might use machine formatted Internet Email that gets decoded by machine on the other side. Which would mean that a lot of "financial information" could be travelling over "their email system".
10:1 says the guy is an employee who lost his gruntles.
Javascript + Nintendo DSi = DSiCade
Funny how MS gets criticism on /. even though eBay has run on Java and Solaris since 2005.
i bm/
p
http://www.theregister.co.uk/2005/07/13/ebay_sun_
and
http://sun.ebay.com/odcs/custom.htm?template=popu
So, yeah I'l agree with you - its probably bad architecure that's at fault.
I know I cannot be the only person thinking "what a loser." Maybe this guy has some motive behind his actions, but if you're in the world of IT Security you are relatively familiar with Romanian whackers. They can take the most mundane abuse of something and claim it as hacking. This is a perfect example. Is someone cracking, phishing, or scamming their way onto eBay's message boards that much of a "prank" or "hack"? I do not think so. Does it spell out that there is a security weakness somewhere? Absolutely. You will find this in almost any large organization when someone specifically targets them, their employees, and/or users. I cannot begin to account for how many times various ISP have been publicly hacked/owned/pranked, far worse than this.
:)
Do that many people really get their news from eBay message boards? This guy is getting on account and posting messages. What is his next hack going to be? Use a stolen or fraudulently created account to post a *FAKE* auction? This guy can hardly penetrate systems at will. I think there's a reason he only seems to pop up at certain times. Classify this guy as another moron that needs to find something better to do.
Hopefully this loser will join the ranks of Victor Faur. Not so much in notoriety, but in the loss of the right to use a computer or travel internationally.