eBay user data for sale?

#1

Post by troy1987 » Thu, May 22, 2014, 3:05 PM UTC

Re: eBay user data for sale?

#2

Post by kanzure » Thu, May 22, 2014, 3:14 PM UTC

Ha! That's cute. The joke is that anyone can send any relevant transaction hash that they see straight by email. Obviously, if they were serious, they would offer a unique Bitcoin address to each prospective buyer.

Re: eBay user data for sale?

#3

Post by hughes » Thu, May 22, 2014, 3:20 PM UTC

Hacking as a spectator sport: we get to watch the blockchain for buyers![0]

[0] https://blockchain.info/address/1e4aLP3jKD9wRAcSRNVb7VHbd7Kb...

Re: eBay user data for sale?

#4

Post by Doji » Thu, May 22, 2014, 3:21 PM UTC

kanzure wrote: post #2

Ha! That's cute. The joke is that anyone can send any relevant transaction hash that they see straight by email. Obviously, if they were serious, they would offer a unique Bitcoin address to each prospective buyer.

Not to mention some kind of escrow.

Re: eBay user data for sale?

#5

Post by ForHackernews » Thu, May 22, 2014, 3:23 PM UTC

I have an eBay account, but I haven't used it in years, and I doubt I remember the password.

How worried about this should I be? Are there plaintext passwords exposed, or do they just have a lot of properly salted hashes that aren't much use to an attacker?

Re: eBay user data for sale?

#6

Post by aortenzi » Thu, May 22, 2014, 3:24 PM UTC

kanzure wrote: post #2

Ha! That's cute. The joke is that anyone can send any relevant transaction hash that they see straight by email. Obviously, if they were serious, they would offer a unique Bitcoin address to each prospective buyer.

Wouldn't be hard for him to follow up with "to prove it was you, sign X with the sending private key" if there are multiple claims.

Re: eBay user data for sale?

#7

Post by rwmj » Thu, May 22, 2014, 3:26 PM UTC

hughes wrote: post #3

Hacking as a spectator sport: we get to watch the blockchain for buyers![0] [0] https://blockchain.info/address/1e4aLP3jKD9wRAcSRNVb7VHbd7Kb...

Or at least for people gullible enough to send $1000 speculatively to a random person on the internet.

Re: eBay user data for sale?

#8

Post by andrewmunsell » Thu, May 22, 2014, 3:27 PM UTC

ForHackernews wrote: post #5

I have an eBay account, but I haven't used it in years, and I doubt I remember the password. How worried about this should I be? Are there plaintext passwords exposed, or do they just have a lot of properly salted hashes that aren't much use to an attacker?

There aren't any plain text passwords, but there are email addresses, physical addresses, phone numbers, and DOBs.

Re: eBay user data for sale?

#9

Post by iaskwhy » Thu, May 22, 2014, 3:28 PM UTC

ForHackernews wrote: post #5

I have an eBay account, but I haven't used it in years, and I doubt I remember the password. How worried about this should I be? Are there plaintext passwords exposed, or do they just have a lot of properly salted hashes that aren't much use to an attacker?

As with any other hacked company, assume the worst: everything was leaked as plaintext.

Re: eBay user data for sale?

#10

Post by aetherson » Thu, May 22, 2014, 3:28 PM UTC

ForHackernews wrote: post #5

I have an eBay account, but I haven't used it in years, and I doubt I remember the password. How worried about this should I be? Are there plaintext passwords exposed, or do they just have a lot of properly salted hashes that aren't much use to an attacker?

Reports indicated that the passwords were encrypted, but I do not believe they've mentioned what the encryption scheme is.

Plaintext uniquely identifying information like Date of Birth was included, however.