Live data from Hacker News

eBay is port scanning visitors to their website

blog.nem.ec

11–20 of 148 posts

Re: eBay is port scanning visitors to their website

#12
post #9

I asked this earlier and nobody had a response, so thought I'd ask it again: is there an extension to block this? Edit: @Windows users: pip install pydivert and then try to write a script to block connections from Chrome to non-Chrome processes. you might need GetTcpTable2() or something. (Looking into this now. Check out http://stackoverflow.com/a/25431340 )

I'm not aware of any extension for this but i think we run browser in some kind of docker containers we could avoid this.

One thing that could break due to this could login via XYZ network which opens a new tab in the default browser for authentication.

Re: eBay is port scanning visitors to their website

#13

Humanity constructed something wonderful and new. (The internet.) And the corporate web has all but destroyed it.

Slightly OT but I’d suggest that the thing that has “ruined” the internet (for me) more than any other single thing are trolls, and they predate the corporate web by a long way.

Re: eBay is port scanning visitors to their website

#14
It's crystal clear why they do this.

Many companies or persons share their desktops for remote usage. Later they sell this service to eBay users. And they're using it for different fraudulent activities - from making real sales (just for stars) to bidding to own items (for rising price).

For years eBay fight this.

Re: eBay is port scanning visitors to their website

#16
post #14

It's crystal clear why they do this. Many companies or persons share their desktops for remote usage. Later they sell this service to eBay users. And they're using it for different fraudulent activities - from making real sales (just for stars) to bidding to own items (for rising price). For years eBay fight this.

They should find a better way instead of compromising privacy of all the users.

And even if they decided don't they have any responsibility to tell the users.

Re: eBay is port scanning visitors to their website

#17
post #9

I asked this earlier and nobody had a response, so thought I'd ask it again: is there an extension to block this? Edit: @Windows users: pip install pydivert and then try to write a script to block connections from Chrome to non-Chrome processes. you might need GetTcpTable2() or something. (Looking into this now. Check out http://stackoverflow.com/a/25431340 )

As far as I know these port scans are done using WebRTC. Using a browser extension[0] it is easy to deactivate it on the go. Personally, I always have WebRTC disabled by default (as it has several nasty security implications), and only activate it if I explicitly need it for something.

[0] https://addons.mozilla.org/en-US/firefox/addon/happy-bonobo-...

Re: eBay is port scanning visitors to their website

#18
post #14

It's crystal clear why they do this. Many companies or persons share their desktops for remote usage. Later they sell this service to eBay users. And they're using it for different fraudulent activities - from making real sales (just for stars) to bidding to own items (for rising price). For years eBay fight this.

I don't understand this could you explain?

Re: eBay is port scanning visitors to their website

#20
This is what happens when there is a browser monopoly. Fixing security do not have priority. Maximizing revenue is the priority. The browser should stop outgoing connections that are not from the same origin. Then users have to opt in like with popup windows.
Post reply on HN