Topic: eBay asking users to change passwords

[ken65]

nice fridge dave, my last job was at a micro brewery, everyday i had to empty out kegs of beer, nothing wrong with it at all , just needed the kegs empty, used to get a free keg every 100 hours aswell , anyway after awhile i couldn't stand to waste all that nectar of the nitwits so i started carrying old 1.25l plastic coke bottles in the boot of my car and used  to take home all the beer i could carry, in the end it nearly killed me, i had more beer than i could ever give away which was  much better than the commercial beer i drink now.    glad i don't work there anymore, my organs would have given up the ghost ages ago,   ken

[Duanob]

I've had the same EBAY password for over 15 years. And NOW I have to change it?

[70CB750]

Small inspiration:

https://www.youtube.com/watch?v=a6iW-8xPw3k

[Stev-o]

I got the email today.   I think I'll use  FukYou2Scammer as my new password.

[AJK]

I used "supercalifragilisticexpialidocious"with mixed upper/lower case,now even I cant log in!

Dave, i just tried that password on your account and it let me in, but don't worry, i didn't buy anything. I think you forgot to put some numbers in that password because its a bit easy to crack...

[Stev-o]

I used "supercalifragilisticexpialidocious"with mixed upper/lower case,now even I cant log in!

Dave, i just tried that password on your account and it let me in, but don't worry, i didn't buy anything. I think you forgot to put some numbers in that password because its a bit easy to crack...

Do it again and buy him a CB750, I think he is ready

[AJK]

I used "supercalifragilisticexpialidocious"with mixed upper/lower case,now even I cant log in!

Dave, i just tried that password on your account and it let me in, but don't worry, i didn't buy anything. I think you forgot to put some numbers in that password because its a bit easy to crack...

Do it again and buy him a CB750, I think he is ready

Damnit, he just changed the password on me!

[dave500]

I used the complete works of shakespere this time,boy that took some copy/paste effort!

[ekpent]

yes changed mine , now all ive got to do is remember it .

the stollen passwords were all encrypted anyway so should be ok . its all the other stuff like email , date of birth location etc that wasn't .

Since they have everyone's email address, if anyone receives an email from "eBay" asking to update your password, don't use the link in the email - it might be a link to a dodgy copy-cat site. Enter the ebay website into your location bar yourself to avoid this.

Also, re the encryption, no one knows how strong it is as they are using a "proprietary" algorithm to hash the passwords. A strong, peer-reviewed hashing algorithm that is well used in the community would have been better.

Whoops --- wish I had read that earlier. I had to change mine this morning to get on.

[von_Wanderlust]

Hopefully it was a real notice from eBay and not a hacker "phishing" for passwords/info. If you are concerned, log back in (type it in yourself) and change it again. 

I received one from "eBay" on the weekend. The email itself came from an email server out of Austria so I suspect it was a fake. I just deleted it as I had already changed passwords.

[MoMo]

Hopefully it was a real notice from eBay and not a hacker "phishing" for passwords/info. If you are concerned, log back in (type it in yourself) and change it again. 

I received one from "eBay" on the weekend. The email itself came from an email server out of Austria so I suspect it was a fake. I just deleted it as I had already changed passwords.

Pretty sure it is real as the notice pops up on my home page every time I open My Summary...Larrry

[von_Wanderlust]

Yes, there is definitely a real issue at the moment, it is also on my homepage, and it has been widley reported that eBay had lost them.

It has been so widely reported that even scammers will be on to it now. The problem is that they can create html links in email that look like a valid address, but actually send you to another, malicious copy-cat website, and they then take your details when you login and update your password. Entering the address yourself avoids that possibility.

[FuZZie]

Sooo... first phishing email has shown up in my in box. Easy to spot just watch the address your asked to reply too! 

[Retro Rocket]

I had the phishing email turn up about an hour after the legit one, I had already gone into my account and changed my password before either notification....   If you aren't sure if the ebay email is legit, just go into your ebay account and change the password without the link....