Subscribe    RSS Feeds    Twitter            Contact Us 
Web Site  
728_header.jpg (23748 bytes)
 Home   EB Blog   AB Blog   Letters   Podcasts   ABTV   Forums   EPIS   PR Service   Classifieds   Ecommerce EKG   Service Ratings   
Service Ratings 
   Auction Sites
   FP Marketplaces
   Inventory Management
   Payment Services
   Storefronts & Carts
   Sniping Services
   Wholesale/Dropshipping
   Email List Hosting
   Consignment Services
   Ecommerce EKG 
   Auction Calendar
   Collectors' Links
   eBay Promo History
   Bookshelf
   Fraud Resources
   Drop-Off Store Laws
   ABTV
   Ecommerce Resources
   Photo Tips
   Marketing Inserts
   Yellow Pages
   Advertising

EcommerceBytes-NewsFlash, Number 408 - October 09, 2002 - ISSN 1539-5065     | Next
eBay Rolls Out New Security Feature to Combat Dictionary Attacks
By Ina Steiner
EcommerceBytes.com
October 09, 2002




Some eBay members were upset when they came across a security feature that eBay rolled out several weeks ago as part of its new Community Protection Initiative. Unaware that it was a security feature, users feared it was a tactic by eBay to ban members from using certain third-party software.

The feature was put in place several weeks ago to thwart "dictionary attacks," also known as brute-force logon attacks. Hackers were using dictionary attacks to try to hijack eBay member accounts. Hackers use automated robots to try logging into a member's account using a dictionary of possible passwords. eBay's new security feature kicks in after a certain number of failed log-in attempts, whereupon a screen will come up that asks the member to enter their User ID, password, and a Security Code that appears on the screen. The "Security Code" is a picture of a number, requiring a person to be at the computer to enter the code.

eBay spokesperson Kevin Pursglove said the feature is part of eBay's initiative to increase trust and safety on the site, and he said members should avoid short passwords and should use a combination of letters and numbers in their passwords to make them safer. Pursglove said the new feature is one of a number of efforts rolled out as part of the eBay Community Protection Initiative started this year.

eBay members are also vulnerable to other types of attempts to gain access to their passwords. A message on eBay's announcement board posted Monday reminded members: "If you are concerned about the authenticity of an email solicitation for personal information that suggests that it is from eBay, you should not provide personal information. Instead, forward that email to spam@ebay.com so that we can investigate it. Likewise, if you are concerned about the authenticity of a web page that you have linked to through a spam email, you should not provide personal information, and you should forward the email containing the link to spam@ebay.com."

You may quote up to 50 words of any article on the condition that you attribute the article to EcommerceBytes.com and either link to the original article or to www.EcommerceBytes.com.
All other use is prohibited.

Email Newsletter icon, E-mail Newsletter icon, Email List icon, E-mail List icon Sign up for our Email Newsletters

Email this story to a friend.

| Next

 EcommerceBytes Blog 
 AuctionBytes Blog 
 Letters to the Editor 
Related Stories 
Related Stories
  • Microsoft Issues Critical Security Warning for Windows XP Users - December 22, 2001, Issue #60
  • eBay Rolls Out New Security Feature to Combat Dictionary Attacks - October 09, 2002, Issue #408
  • AuctionStealer Reports Security Breach - May 25, 2003, Issue #543
  • eBay: Scammers Obtained Customer Data from PayPal Merchants - March 15, 2004, Issue #718
  • eBay's New Security System Takes Effect May 1 - April 29, 2004, Issue #750


  •  

    About Us      Privacy Policy      Link to Us      Partners      Our Writers      Write for Us      Press        Site Index

    Copyright 1999-. Steiner Associates LLC. All rights reserved.