Live data from Hacker News

eBay is port scanning visitors to their website

blog.nem.ec

121–130 of 148 posts

Re: eBay is port scanning visitors to their website

#121
post #27
post #9

I asked this earlier and nobody had a response, so thought I'd ask it again: is there an extension to block this? Edit: @Windows users: pip install pydivert and then try to write a script to block connections from Chrome to non-Chrome processes. you might need GetTcpTable2() or something. (Looking into this now. Check out http://stackoverflow.com/a/25431340 )

Previous discussion mentioned a filter rule for uBlock Origin like $websocket to override this for sites which break use e.g. @@gateway.discord.gg $websocket

https://github.com/uBlockOrigin/uBlock-issues/issues?q=is%3A...

Re: eBay is port scanning visitors to their website

#124
post #82

Earlier quoted context omitted.

A family member with a Dell has similar BSOD problem when visiting some of these websites. Do we know what software preinstalled on Dell causing the problem?

the BSOD minidump should tell you which driver crashed. GUIs exist for analyzing minidumps, it might even be feasible to talk someone through the process over the phone.

One example of a GUI analysis tool for these kinds of memory dumps is WhoCrashed; another is BlueScreenView.

https://www.resplendence.com/whocrashed

http://www.nirsoft.net/utils/blue_screen_view.html

Re: eBay is port scanning visitors to their website

#125
post #106

Earlier quoted context omitted.

"IE". Difficult to search for what that means.

Internet Explorer. A much maligned legacy browser for legacy windows desktop platforms. Aside from being intensely maligned and full of security holes, it doesn't (or didn't?) support WebRTC. So being called IE is sarcastic like ha ha if you're so concerned about security downgrade to IE which doesn't support WebRTC.

The "safari is the new ie" is basically any time apple doesn't implement a web spec it's because they're trying to kill the web, and the privacy complaints are nonsense that doesn't matter. All that matters is developers having shiny new toys.

Re: eBay is port scanning visitors to their website

#126
post #9

I asked this earlier and nobody had a response, so thought I'd ask it again: is there an extension to block this? Edit: @Windows users: pip install pydivert and then try to write a script to block connections from Chrome to non-Chrome processes. you might need GetTcpTable2() or something. (Looking into this now. Check out http://stackoverflow.com/a/25431340 )

Is there a way to make Chrome ask permission before allowing a site to utilize WebRTC?

Similar to how you can make it prompt to store Cookies, provide Location, use the Camera/Mic, etc.

Re: eBay is port scanning visitors to their website

#127
post #103
post #19

This might explain why some preinstalled HP laptop software (with open ports?) causes a BSOD when users visit ebay https://h30434.www3.hp.com/t5/Notebook-Operating-System-and-...

A preinstalled local server, presumably running in kernel space for it cause BSOD, crash when connected from localhost and attempted TLS handshake? The preinstalled crapware never changes.

I feel like the only good option at this point when purchasing a prebuilt desktop or a laptop is to nuke the drive and do a clean install of Windows. Seems like the only way to ensure that you've killed the crapware and any partitions meant to preserve/reinstall it.

Re: eBay is port scanning visitors to their website

#128
post #127
post #103

Earlier quoted context omitted.

A preinstalled local server, presumably running in kernel space for it cause BSOD, crash when connected from localhost and attempted TLS handshake? The preinstalled crapware never changes.

I feel like the only good option at this point when purchasing a prebuilt desktop or a laptop is to nuke the drive and do a clean install of Windows. Seems like the only way to ensure that you've killed the crapware and any partitions meant to preserve/reinstall it.

Sometimes that isn't even enough. Windows for example ships with a feature called the "Windows Platform Binary Table" that will load and run DLLs embedded in a machine's ACPI tables.

Re: eBay is port scanning visitors to their website

#129
post #61
post #14

It's crystal clear why they do this. Many companies or persons share their desktops for remote usage. Later they sell this service to eBay users. And they're using it for different fraudulent activities - from making real sales (just for stars) to bidding to own items (for rising price). For years eBay fight this.

>Many companies or persons share their desktops for remote usage. Later they sell this service to eBay users. Is this really a thing? I thought everybody just used residential proxy/VPN services like luminati. It makes sense too, because a proxy service is way easier to adapt to your application than a remote desktop service.

Luminati can be detected too specially when you're company with DEEP pockets.

Re: eBay is port scanning visitors to their website

#130
post #25

Earlier quoted context omitted.

irrc, eBay uses websocket connections [0] to scan the ports. Firefox doesn't offer an option to disable websockets in the about:config page. However, I have read about workarounds by setting network.websocket.max-connections=0 This is a global setting and is applied to all websites. I also wasn't able to test this myself yet. Are there any good extensions for blocking websockets on for specific domains? [0] https://n…

This won't actually disable websockets if I recall. There's a blocklist that may make it into uBO in the future that blocks 3rd party access to localhost and other IANA reserved IP addresses, though. https://github.com/uBlockOrigin/uBlock-issues/issues?q=is%3A...

That link is incorrect.

https://github.com/uBlockOrigin/uBlock-issues/issues/1070

Post reply on HN