IDNetters Forums

Technical News & Discussion => Windows News & Discussion => Topic started by: Rik on Mar 09, 2009, 12:44:44

Title: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Rik on Mar 09, 2009, 12:44:44
El Reg (http://www.theregister.co.uk/2009/03/08/ebay_scam_wizardy/) is reporting the problem this morning.

QuoteeBay scammers have been exploiting unpatched vulnerabilities in the Firefox and Internet Explorer browsers to deliver counterfeit pages that try to dupe people surfing the online auction house to bid on fraudulent listings.

The attacks managed to inject eBay pages with hostile code by exploiting bugs long known to afflict Firefox and IE. While eBay has managed to block the exploit from working on its domains, other websites that accept user-generated content may still be vulnerable to the attacks, web security experts warn.

Firefox security volunteers say they are in the process of patching the vulnerability. For their part, Microsoft officials say the exploits aren't the result of a vulnerability in IE but rather of websites that fail to properly protect against such attacks.

Gird your loins. :(
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Simon on Mar 09, 2009, 13:07:23
It's not even safe to stay in these days!  ::)
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Rik on Mar 09, 2009, 13:13:51
I've never felt safe on eBay. :)
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Sebby on Mar 09, 2009, 13:28:32
You just have to be extremely careful with eBay. It's getting increasingly more likely that you'll be scammed.
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Rik on Mar 09, 2009, 14:35:39
Bit like life, eh Seb? :(
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Sebby on Mar 09, 2009, 17:46:29
Unfortunately, yes. :(
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: BrianM on Mar 09, 2009, 18:12:45
Thanks for that Rik, I don't use Ebay, will pass it on to friends i know who do  :thumb:
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Rik on Mar 09, 2009, 18:17:41
You're like me then, Brian. :)
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Niall on Mar 09, 2009, 20:47:52
Quote from: Rik on Mar 09, 2009, 13:13:51
I've never felt safe on eBay. :)

To be fair, it's not as bad as it's been in the past. My mate in work, trades on there. My major concern is Paypal. They don't seem to care if you get scammed or not. Even if you have a legitimate problem that results in the product not arriving for example, they suddenly don't care. I've read and heard a lot of people having problems with Paypal, which is why I've never given them my details after opening an account with them. Still, I got 6p out of it :D
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Simon on Mar 09, 2009, 20:56:41
I've actually been lucky with PayPal, and they did manage to recover funds for a faulty item purchased on eBay, after the seller suddenly became rather elusive.  OK, it was only £15, but it was the principal of the thing.  :)
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Rik on Mar 10, 2009, 09:37:45
I know what you mean. Sometimes, it isn't worth the aggro for anything but the principle.
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Gary on Mar 10, 2009, 09:49:22
I avoid ebay and paypal for all the reasons stated above, I to have never felt safe on ebay, I have seen to many friends scammed  >:(
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: talos on Mar 10, 2009, 10:38:21
I've been with EBay for many years as a buyer and seller, it has changed, not always for the better but I still can sell unwanted items there and buy something I couldn't  get anywhere else. Yes there are scammers, just as there are everywhere, even on the high street (banks etc). If you are the kind of person who would fall for the doorstep tradesman or the letter telling you you have won millions, then steer clear of EBay, you are ripe for the picking,  but if you use common sense, do the research, act securely it becomes a very useful tool for clearing clutter or getting that obsolete spare part. There are may who will knock it, usually the same ones that have never tried it, but they'll tell you they know someone who has :eyebrow:
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Rik on Mar 10, 2009, 10:49:26
I'm sure it's great for most people, Bob, it just makes me nervous.
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: talos on Mar 10, 2009, 10:50:27
why?
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Rik on Mar 10, 2009, 10:51:49
The idea of giving money to a perfect stranger with no company and no consumer protection behind me.
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: talos on Mar 10, 2009, 11:00:58
If you have had a bad experience, I can understand, but I've found doing my research into the seller pays dividends, if you feel you cant trust them DONT, there will be another along in a moment. :)
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Sebby on Mar 10, 2009, 13:21:13
I don't think I've ever had a problem with eBay, but I must admit I am more wary now.
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Lance on Mar 10, 2009, 14:31:37
I've never had a problem either (I even made my first sale last week with no problems!). I find that checking out the seller in terms of recent feedback is one of the most important things. I also tend to check the recent purchases of the seller too.
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: talos on Mar 10, 2009, 17:34:00
Quote from: Lance on Mar 10, 2009, 14:31:37
I've never had a problem either (I even made my first sale last week with no problems!). I find that checking out the seller in terms of recent feedback is one of the most important things. I also tend to check the recent purchases of the seller too.

Another method I use is if you are worried about a seller, ask them a question or ask if you can phone them, the reply is often a good indicator of the character.
If you are buying ALWAYS ALWAYS wait until the item arrives and checked BEFORE you pay
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Niall on Mar 10, 2009, 20:32:03
Quote from: Rik on Mar 10, 2009, 10:49:26
I'm sure it's great for most people, Bob, it just makes me nervous.

Personally I am actually thinking of opening a bank account, specifically for use with ebay (and have been for years really, but I never get around to it) so there are only funds in there for use when I need them. If I did it with Natwest (even though I hate them) it'd be a simple case of accessing my account online and instantly transferring the cash. That way if anything went wrong, no one could get anything other than the few pence that would be in there.

The only reason I'm thinking of it, is because there are a LOT of good guitar pedals on ebay dirt cheap that I want :D
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: talos on Mar 11, 2009, 08:48:55
Quote from: Niall on Mar 10, 2009, 20:32:03
Personally I am actually thinking of opening a bank account, specifically for use with ebay (and have been for years really, but I never get around to it) so there are only funds in there for use when I need them. If I did it with Natwest (even though I hate them) it'd be a simple case of accessing my account online and instantly transferring the cash. That way if anything went wrong, no one could get anything other than the few pence that would be in there.

The only reason I'm thinking of it, is because there are a LOT of good guitar pedals on ebay dirt cheap that I want :D


That's a very good idea, but people to tend to be wary of instant cash transfers because of having to give bank details.         But if you use your bank account idea in conjunction with the PayPal scheme as do I, you will have two layers of protection and nobody but PayPal needs to know the bank details, its also indispensable if you decide to sell something,    good luck with the bargain hunting and be safe :thumb:
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Simon on Mar 11, 2009, 10:19:50
Bear in mind, though, that having low funds in a bank account won't always stop debits being made.  Most banks will allow small unauthorised overdrafts, and charge you on top for the privelage.  And no, I can never spell priv...
Title: Re: eBay scammers at work on security vulnerabilities in IE7/FF
Post by: Rik on Mar 11, 2009, 10:23:22
:zip: ;D