There is a notice on their homepage saying all users should
change their passwords.

On 5/22/2014 5:28 AM, Dean Hoffman wrote:

There is a notice on their homepage saying all users should
change their passwords.


Actually, there is NO SUCH MESSAGE on their home page nor in any
messaging to their registered users as of 5:55AM, CDST, today.

If you, Dean, received an email notifying you of this "hack" I suspect
that you were duped by a phishing expedition and have given up your own
password to ebay.

On 5/22/14 5:53 AM, Unquestionably Confused wrote:
On 5/22/2014 5:28 AM, Dean Hoffman wrote:

There is a notice on their homepage saying all users should
change their passwords.


Actually, there is NO SUCH MESSAGE on their home page nor in any
messaging to their registered users as of 5:55AM, CDST, today.

If you, Dean, received an email notifying you of this "hack" I suspect
that you were duped by a phishing expedition and have given up your own
password to ebay.


Well, I just looked at their homepage again. It is there. I
clicked a couple links to look at some listings. That part seems to be
working also.
I didn't receive emails about the hack. I typed Ebay hack into
Bing search. There are several references to it. Among those is CNN,
MSN, and ABC. It's possible they've all been duped.

Unquestionably Confused wrote in news:537dd752$0$58389
:

On 5/22/2014 5:28 AM, Dean Hoffman wrote:

There is a notice on their homepage saying all users should
change their passwords.


Actually, there is NO SUCH MESSAGE on their home page nor in any
messaging to their registered users as of 5:55AM, CDST, today.

There certainly is. If you've disabled Javascript, you won't see it though.

On 5/22/2014 6:09 AM, Dean Hoffman wrote:
On 5/22/14 5:53 AM, Unquestionably Confused wrote:
On 5/22/2014 5:28 AM, Dean Hoffman wrote:

There is a notice on their homepage saying all users should
change their passwords.


Actually, there is NO SUCH MESSAGE on their home page nor in any
messaging to their registered users as of 5:55AM, CDST, today.

If you, Dean, received an email notifying you of this "hack" I suspect
that you were duped by a phishing expedition and have given up your own
password to ebay.


Well, I just looked at their homepage again. It is there. I
clicked a couple links to look at some listings. That part seems to be
working also.
I didn't receive emails about the hack. I typed Ebay hack into
Bing search. There are several references to it. Among those is CNN,
MSN, and ABC. It's possible they've all been duped.

My apologies... I see what you mean about everybody and their brother
talking it up.

Still, I looked high and low on ebay.com and there was no obvious
mention made of a problem UNTIL I clicked on my personal account and
attempted to modify my password. Only THEN did a box pop up suggesting
that I change my password due to the hack.

Stupid Ebayg

Doug Miller wrote:
Unquestionably Confused wrote in
news:537dd752$0$58389 :

On 5/22/2014 5:28 AM, Dean Hoffman wrote:

There is a notice on their homepage saying all users
should change their passwords.


Actually, there is NO SUCH MESSAGE on their home page nor in any
messaging to their registered users as of 5:55AM, CDST, today.

There certainly is. If you've disabled Javascript, you won't see it
though.

They have a message service that sends me "offers" frequently , I wonder
why they didn't share this important info with all users thru that system
.... I did change mine after checking it out .
--
Snag

Doug Miller wrote in
:

Unquestionably Confused wrote in
news:537dd752$0$58389 :

On 5/22/2014 5:28 AM, Dean Hoffman wrote:

There is a notice on their homepage saying all users
should
change their passwords.


Actually, there is NO SUCH MESSAGE on their home page nor in any
messaging to their registered users as of 5:55AM, CDST, today.

There certainly is. If you've disabled Javascript, you won't see it
though.



Here is some of the text of the hack notice on eBay's home page:

"On Wednesday, we announced that we are asking all eBay users to change
their password. This is because of a cyberattack that compromised our eBay
user database, which contained your encrypted password.

"Because your password is encrypted (even we don’t know what it is), we
believe your eBay account is secure. But we don’t want to take any chances.
We take security on eBay very seriously, and we want to ensure that you
feel safe and secure buying and selling on eBay. So we think it’s the right
thing to do to have you change your password. And we want to remind you
that it’s a good idea to always use different passwords for different sites
and accounts. If you used your eBay password on other sites, we are
encouraging you to change those passwords, too."

--
Tegger

Unquestionably Confused wrote in news:537ddda1$0$58399
:

On 5/22/2014 6:09 AM, Dean Hoffman wrote:
On 5/22/14 5:53 AM, Unquestionably Confused wrote:
On 5/22/2014 5:28 AM, Dean Hoffman wrote:

There is a notice on their homepage saying all users should
change their passwords.


Actually, there is NO SUCH MESSAGE on their home page nor in any
messaging to their registered users as of 5:55AM, CDST, today.

If you, Dean, received an email notifying you of this "hack" I suspect
that you were duped by a phishing expedition and have given up your own
password to ebay.


Well, I just looked at their homepage again. It is there. I
clicked a couple links to look at some listings. That part seems to be
working also.
I didn't receive emails about the hack. I typed Ebay hack into
Bing search. There are several references to it. Among those is CNN,
MSN, and ABC. It's possible they've all been duped.

My apologies... I see what you mean about everybody and their brother
talking it up.

Still, I looked high and low on ebay.com and there was no obvious
mention made of a problem UNTIL I clicked on my personal account and
attempted to modify my password. Only THEN did a box pop up suggesting
that I change my password due to the hack.

Stupid Ebayg

Ebay isn't the stupid one here. The notice appears, very prominently, at the top of the page
as soon as www.ebay.com loads.

On Thu, 22 May 2014 12:31:03 +0000 (UTC), Doug Miller
wrote:

Unquestionably Confused wrote in news:537ddda1$0$58399
:

On 5/22/2014 6:09 AM, Dean Hoffman wrote:
On 5/22/14 5:53 AM, Unquestionably Confused wrote:
On 5/22/2014 5:28 AM, Dean Hoffman wrote:

There is a notice on their homepage saying all users should
change their passwords.


Actually, there is NO SUCH MESSAGE on their home page nor in any
messaging to their registered users as of 5:55AM, CDST, today.

If you, Dean, received an email notifying you of this "hack" I suspect
that you were duped by a phishing expedition and have given up your own
password to ebay.


Well, I just looked at their homepage again. It is there. I
clicked a couple links to look at some listings. That part seems to be
working also.
I didn't receive emails about the hack. I typed Ebay hack into
Bing search. There are several references to it. Among those is CNN,
MSN, and ABC. It's possible they've all been duped.

My apologies... I see what you mean about everybody and their brother
talking it up.

Still, I looked high and low on ebay.com and there was no obvious
mention made of a problem UNTIL I clicked on my personal account and
attempted to modify my password. Only THEN did a box pop up suggesting
that I change my password due to the hack.

Stupid Ebayg

Ebay isn't the stupid one here. The notice appears, very prominently, at the top of the page
as soon as www.ebay.com loads.

My saved password logged me in at the same time the page came up, but I
also didn't have to try to modify my password.

At the same time the first screen came up, it included a big orange,
black, and white box that said IMPORTANT PASSWORD UPDATE. To protect
the security and privacy of our customers we're asking all Ebay users to
reset their passwords. Learn more.


So what might happen to me if I don't do so? I have id/password
combinations and I can't think too much today.


BTW, the news was on NPR too.

"Unquestionably Confused" wrote in message
...
On 5/22/2014 5:28 AM, Dean Hoffman wrote:

There is a notice on their homepage saying all users should
change their passwords.


Actually, there is NO SUCH MESSAGE on their home page nor in any messaging
to their registered users as of 5:55AM, CDST, today.

If you, Dean, received an email notifying you of this "hack" I suspect
that you were duped by a phishing expedition and have given up your own
password to ebay.

The situation has been discussed on a number of blogs and several nation
news stations. Not to mention a few private list I sub to on the subject.

True or not the simplest solution is to go to eBay's web site and manually
change your PW. Do/don't take the precautions -- your money/your options.

On 05/22/2014 05:31 AM, Doug Miller wrote:

Ebay isn't the stupid one here. The notice appears, very prominently,
at the top of the page as soon as www.ebay.com loads.

Maybe for you it does, but not for me.

Jon

"Dean Hoffman " wrote:

There is a notice on their homepage saying all users should
change their passwords.
Hi,
As soon as I read about it, I changed my PW.

Jon Danniken wrote in news:lll5o2$14s$2
@speranza.aioe.org:

On 05/22/2014 05:31 AM, Doug Miller wrote:

Ebay isn't the stupid one here. The notice appears, very prominently,
at the top of the page as soon as www.ebay.com loads.

Maybe for you it does, but not for me.

Got javascript disabled in your browser?

Doug Miller wrote:
Jon Danniken wrote in
news:lll5o2$14s$2 @speranza.aioe.org:

On 05/22/2014 05:31 AM, Doug Miller wrote:

Ebay isn't the stupid one here. The notice appears, very
prominently, at the top of the page as soon as www.ebay.com loads.

Maybe for you it does, but not for me.

Got javascript disabled in your browser?

Doesn't come up for me either , with a clean install of IE8 that's never
been tweaked . Nor with the Firefox browser that's my default .
--
Snag

On 05/22/2014 09:15 AM, Doug Miller wrote:
Jon Danniken wrote in news:lll5o2$14s$2
@speranza.aioe.org:

On 05/22/2014 05:31 AM, Doug Miller wrote:

Ebay isn't the stupid one here. The notice appears, very prominently,
at the top of the page as soon as www.ebay.com loads.

Maybe for you it does, but not for me.

Got javascript disabled in your browser?

Nope.

On Thu, 22 May 2014 14:07:32 -0500, "Terry Coombs"
wrote:

Doug Miller wrote:
Jon Danniken wrote in
news:lll5o2$14s$2 @speranza.aioe.org:

On 05/22/2014 05:31 AM, Doug Miller wrote:

Ebay isn't the stupid one here. The notice appears, very
prominently, at the top of the page as soon as www.ebay.com loads.

Maybe for you it does, but not for me.

Got javascript disabled in your browser?

Doesn't come up for me either , with a clean install of IE8 that's never
been tweaked . Nor with the Firefox browser that's my default .

It showed for me, after I temporarily allowed the script. Otherwise,
the Notice was blank. (FF 29.1)

On 5/22/2014 7:11 AM, Tegger wrote:
Doug Miller wrote in
:
[snip]

Actually, there is NO SUCH MESSAGE on their home page nor in any
messaging to their registered users as of 5:55AM, CDST, today.

There certainly is. If you've disabled Javascript, you won't see it
though.



Here is some of the text of the hack notice on eBay's home page:

"On Wednesday, we announced that we are asking all eBay users to change
their password. This is because of a cyberattack that compromised our eBay
user database, which contained your encrypted password.

"Because your password is encrypted (even we don’t know what it is), we
believe your eBay account is secure. But we don’t want to take any chances.
We take security on eBay very seriously, and we want to ensure that you
feel safe and secure buying and selling on eBay. So we think it’s the right
thing to do to have you change your password. And we want to remind you
that it’s a good idea to always use different passwords for different sites
and accounts. If you used your eBay password on other sites, we are
encouraging you to change those passwords, too."

This kinda ****es me off. I like Ebay, I really and truly do, and have
used it extensively for many, many years.

It doesn't bother me that they continually send me special offers to
sell items at a discount or free commission (I rarely sell on Ebay) and
it doesn't bother me that they will continually tell me that some
"consumable" I bought three months ago can be had once again.

What DOES bother me is that they have an incident like this and,
apparently, unless you have a browser with Java active (and it's
somewhat ironic that Java itself is often a security problem so many
disable it)and up to date, you don't get the message. I logged in to my
account this morning and... NO WARNING! I checked my Ebay message
center and... NO WARNING! I looked around their security page, etc.
and... Yep, NO WARNING!

I saw no warning whatsoever on the website until I, like Doug swapped
out my password. Only then did I get a pop up box that referred to the
breach and suggested that I change my password. No ****, Sherlock,
that's exactly what I intended to do but you couldn't send me an email
alert like you do several times a week trying to spur activity on your
website? (and I did go back and sort through the trash bin... not a peep
about the breach from them).

On 5/22/2014 7:31 AM, Doug Miller wrote:
Unquestionably Confused wrote in news:537ddda1$0$58399
:

On 5/22/2014 6:09 AM, Dean Hoffman wrote:
On 5/22/14 5:53 AM, Unquestionably Confused wrote:
On 5/22/2014 5:28 AM, Dean Hoffman wrote:

There is a notice on their homepage saying all users should
change their passwords.



[snip]
Still, I looked high and low on ebay.com and there was no obvious
mention made of a problem UNTIL I clicked on my personal account and
attempted to modify my password. Only THEN did a box pop up suggesting
that I change my password due to the hack.

Stupid Ebayg

Ebay isn't the stupid one here. The notice appears, very prominently, at the top of the page
as soon as www.ebay.com loads.

Thanks for the ad hominem attack, Doug. You're in fine form today.

FWIW, I attempted to view the message to which you refer, three separate
times, doing a manual log-in so that I would not chance blowing by the
message on the www.ebay.com site. No message/warning ever showed up
until, as I said, I attempted to change my password.

Now, almost twelve hours later, I go to www.ebay.com and lo and behold
there is the message prominently displayed, as you said, on the main
page. Can't miss it and I DIDN'T miss it this morning because it wasn't
there.

Since I'm on the same internet connect (static IP address), the same
computer (that has not been rebooted) and the same iteration of Firefox,
perhaps the problem was that the message had not made its way through
Ebay's server farm and I was hitting on a server that had yet to be
updated. I dunno but I do know it wasn't there when I diligently looked
for it this morning and your insinuation notwithstanding I'm not stupid
or blind.

On 5/22/2014 8:31 AM, Doug Miller wrote:
Unquestionably Confused wrote in news:537ddda1$0$58399
:

On 5/22/2014 6:09 AM, Dean Hoffman wrote:
On 5/22/14 5:53 AM, Unquestionably Confused wrote:
On 5/22/2014 5:28 AM, Dean Hoffman wrote:

There is a notice on their homepage saying all users should
change their passwords.


Actually, there is NO SUCH MESSAGE on their home page nor in any
messaging to their registered users as of 5:55AM, CDST, today.

If you, Dean, received an email notifying you of this "hack" I suspect
that you were duped by a phishing expedition and have given up your own
password to ebay.


Well, I just looked at their homepage again. It is there. I
clicked a couple links to look at some listings. That part seems to be
working also.
I didn't receive emails about the hack. I typed Ebay hack into
Bing search. There are several references to it. Among those is CNN,
MSN, and ABC. It's possible they've all been duped.

My apologies... I see what you mean about everybody and their brother
talking it up.

Still, I looked high and low on ebay.com and there was no obvious
mention made of a problem UNTIL I clicked on my personal account and
attempted to modify my password. Only THEN did a box pop up suggesting
that I change my password due to the hack.

Stupid Ebayg

Ebay isn't the stupid one here. The notice appears, very prominently, at the top of the page
as soon as www.ebay.com loads.

Problem is, not everyone logs into ebay everyday. They should have
emailed the users to alert them. (They think nothing of sending mother
email, so it's not like they have something against email). I just tried
logging out and then going to the main site and didn't get a message, so
I'm not sure if the message only shows for registered users? (Or maybe
it's a cookie thing). I usually go to the site and don't bother to log
in unless I see something I want to watch.

I read about the hack early this morning. I haven't gotten my "followed"
searches for two days, so went to check out their online forum to see if
anyone else was complaining, and that's when I saw mention of the
problem. And then when I went to my account, that's when I got the on
screen message.

Terry Coombs wrote:

They have a message service that sends me "offers" frequently , I wonder
why they didn't share this important info with all users thru that system
... I did change mine after checking it out .

The IT oriented blogs are giving eBay awards for the suckiest handling of a
security breach yet. The news was all over The Register, Betanews, and
Slashdot before eBay got around to putting a lame suggestion that you might
want to change your password on their homepage.

I believe the whole story about the heartbleed bug and now the hacked ebay profiles is a way to provoke users to change their passwords. My theory is that NSA is prepared for a mass password change.. I hope I'm wrong..

http://www.ebay.com/reset?_trkparms=...59271365881734


eBay
Important Password Update
Reset Your Password eBay Inc. Information Site
Keeping Our Buyers and Sellers Safe and Secure on eBay

On Wednesday, we announced that we are asking all eBay users to change
their password. This is because of a cyberattack that compromised our
eBay user database, which contained your encrypted password.

We take security on eBay very seriously, and we want to ensure that you
feel safe and secure buying and selling on eBay. So we think it’s the
right thing to do to have you change your password. And we want to
remind you that it’s a good idea to always use different passwords for
different sites and accounts. If you used your eBay password on other
sites, we are encouraging you to change those passwords, too.

Here’s what we recommend you do the next time you visit eBay:

Take a moment to change your password. This will help further
protect you; it’s always a good practice to periodically update your
password. Millions of eBay users have already updated their passwords.
Remember to always use different passwords on different sites and
accounts. If you haven’t done this yet, take the time to do so.

Meanwhile, our team is committed to making eBay as safe and secure as
possible. We are looking at other ways to strengthen security on eBay.
In the coming days and weeks we may be introducing new security
features. We’ll keep you updated as we do.

Thanks for your support and cooperation. eBay is your marketplace, and
we are committed to keeping it one of the world’s safest places to buy
and sell.

Devin Wenig

President, eBay Marketplaces
Copyright © 1995-2014 eBay Inc. All Rights Reserved. User Agreement,
Privacy and Cookies.

rbowman wrote:
Terry Coombs wrote:

They have a message service that sends me "offers" frequently , I wonder
why they didn't share this important info with all users thru that system
... I did change mine after checking it out .

The IT oriented blogs are giving eBay awards for the suckiest handling of a
security breach yet. The news was all over The Register, Betanews, and
Slashdot before eBay got around to putting a lame suggestion that you might
want to change your password on their homepage.

I'll add that if you use the eBay app on an iPad, the Password Update
message is there, but only if you scroll down to the bottom of the app's
home page. That is not typically what a user needs to do, at least not me,
so I didn't see the message until I decided to actually look for it based
on this discussion.

I changed my password on the main site through FF only after hearing about
it in this forum. At the time I changed it, there was no message on the
home page. As others have said, the only time I saw the message was when I
was already on the password change screen. That's just a tad too late.

On 23 May 2014, DerbyDad03 wrote in
alt.home.repair:

I changed my password on the main site through FF only after
hearing about it in this forum. At the time I changed it, there
was no message on the home page. As others have said, the only
time I saw the message was when I was already on the password
change screen. That's just a tad too late.

I changed my password early this morning. There was a large notice at
the top of the main page before I changed it, and that notice is still
there now, plus a highlighted button at the top:

http://rednoise.x10host.com/temp/ebay1.png

On Fri, 23 May 2014 14:12:38 -0400, Nil
wrote:

I changed my password early this morning. There was a large notice at
the top of the main page before I changed it, and that notice is still
there now, plus a highlighted button at the top:

http://rednoise.x10host.com/temp/ebay1.png

That notice was on the front page yesterday morning. It did not show
until I allowed a script to run, then it did show on the main page.