I have an eBay account, but I haven't used it in years, and I doubt I remember the password. How worried about this should I be? Are there plaintext passwords exposed, or do they just have a lot of properly salted hashes that aren't much use to an attacker?
eBay user data for sale?
11–20 of 110 posts
Re: eBay user data for sale?
#12Re: eBay user data for sale?
#13I have an eBay account, but I haven't used it in years, and I doubt I remember the password. How worried about this should I be? Are there plaintext passwords exposed, or do they just have a lot of properly salted hashes that aren't much use to an attacker?
Re: eBay user data for sale?
#14Re: eBay user data for sale?
#15I have an eBay account, but I haven't used it in years, and I doubt I remember the password. How worried about this should I be? Are there plaintext passwords exposed, or do they just have a lot of properly salted hashes that aren't much use to an attacker?
There aren't any plain text passwords, but there are email addresses, physical addresses, phone numbers, and DOBs.
EDIT: I stand corrected, see the reply by sp332 below.
Re: eBay user data for sale?
#16I have an eBay account, but I haven't used it in years, and I doubt I remember the password. How worried about this should I be? Are there plaintext passwords exposed, or do they just have a lot of properly salted hashes that aren't much use to an attacker?
Re: eBay user data for sale?
#17I have an eBay account, but I haven't used it in years, and I doubt I remember the password. How worried about this should I be? Are there plaintext passwords exposed, or do they just have a lot of properly salted hashes that aren't much use to an attacker?
eBay didn't say what kind of encryption they had, only that they were encrypted. Personally I'm more concerned about the personal information in the leaked data that wasn't protected at all! So sure, change your password, but it won't change the fact that someone got your name, email address, physical address, phone number, and date of birth.
Re: eBay user data for sale?
#18I have an eBay account, but I haven't used it in years, and I doubt I remember the password. How worried about this should I be? Are there plaintext passwords exposed, or do they just have a lot of properly salted hashes that aren't much use to an attacker?
pbkdf2_sha256$12000$zhMKabMgayvK$iniviUCcX9y2PYJcm0AoB3MhybRA1z2Cec1DZnLWxWc=
I do not know how much time it would take to bruteforce these. Can any experienced HNers weigh in?Re: eBay user data for sale?
#19Re: eBay user data for sale?
#20Earlier quoted context omitted.
There aren't any plain text passwords, but there are email addresses, physical addresses, phone numbers, and DOBs.
It's the DoB which is the giveaway (that this is fake). eBay doesn't collect date of birth, but does collect lots of other authentication information. EDIT: I stand corrected, see the reply by sp332 below.