Powered by Bravenet Bravenet Blog

1.14.10

05:43:09

Vulnerability Allows Mobile Users to Gain Unauthorized Access to eBay UK Accounts

Very interesting and alarming article this morning on auctionbytes.
Apparently there is a gaping hole in their sign-in interface from/for mobile phones.
A user writes:

Almost every-time I log-in to my Account using my Mobile phone I keep getting logged in to other peoples Accounts. From what I see I can bid/buy as well & this can fall in to the wrong hands. Anyone else had this problem?"

Yes, ebaY has a reply, and they state there will be more...
I think we all know what that will be...

For those of you unaware, ebaY still has case insensitive passwords, a cookie handling flaw, and they allow dangerous forms of scripting content inside the user-generated portion of their site. In short, the site is hacked cracked and zombied.

Proof is on my YT channel and a bazillion complaint sites in cyberspace and includes/ is evidenced by Paypal's newest unannounced payment holds for everyone policy.

There is no way of telling what else they will find as web/wireless web technology continues while ebaY stagnates, or what else is out there now for that matter.

Do you trust such an outfit with your financial info? Your livelihood? Your future?

http://budmalcolm.bravejournal.com/entry/42837

0 comments spam filtered.

There are no comments to this entry.

Post New Comment

No Smilies More Smilies »
Please type the letters you see