eBay is port scanning visitors to their website

Has anyone confirmed whether they're still continuing this practice? I'm curious, but at the same time feel highly uncomfortable visiting a website that has no problems exploiting a browser loophole.

Re: eBay is port scanning visitors to their website

#6

Post by robert_tweed » Sat, Jun 06, 2020, 7:56 AM UTC

cube00 wrote: post #2

Previous discussion: https://news.ycombinator.com/item?id=23246170

In case anyone thinks this is a dupe, it's not. This post is inspired by the first article. It gives a much more detailed analysis of the code and what data is sent where.

Re: eBay is port scanning visitors to their website

#7

Post by scollet » Sat, Jun 06, 2020, 8:02 AM UTC

olliej wrote: post #4

wasn't this on the front page just a few days ago?

More than one discussion can be had.

Re: eBay is port scanning visitors to their website

#8

Post by lazyjones » Sat, Jun 06, 2020, 8:08 AM UTC

I thought it would be obvious that eBay is doing this to identify bots (usually on servers) vs. real users (on client-only devices).

Re: eBay is port scanning visitors to their website

#9

Post by mehrdadn » Sat, Jun 06, 2020, 8:11 AM UTC

I asked this earlier and nobody had a response, so thought I'd ask it again: is there an extension to block this?

Edit: @Windows users: pip install pydivert and then try to write a script to block connections from Chrome to non-Chrome processes. you might need GetTcpTable2() or something. (Looking into this now. Check out http://stackoverflow.com/a/25431340)

Re: eBay is port scanning visitors to their website

#10

Post by labster » Sat, Jun 06, 2020, 8:15 AM UTC

mehrdadn wrote: post #9

I asked this earlier and nobody had a response, so thought I'd ask it again: is there an extension to block this? Edit: @Windows users: pip install pydivert and then try to write a script to block connections from Chrome to non-Chrome processes. you might need GetTcpTable2() or something. (Looking into this now. Check out http://stackoverflow.com/a/25431340 )

uBlock Origin on Firefox, at least according to a previous article[0] I read on HN. Doesn't work on Chrome/Edge because they never provided the API.

[0]: https://news.ycombinator.com/item?id=23361823