Is eBay Leaking Information?
from the just-wondering... dept
The Associated Press has a story about a man who’s been indicted for getting his hands on a bunch of eBay accounts, including credit card info, and using those accounts to purchase $32,000 worth of gift certificates. Yet another eBay scam isn’t that interesting, of course, but what’s unclear from the article here is exactly how this guy got the info. The article says: “he hacked into online auctioneer eBay Inc.’s site, stole users’ credit card numbers and then used them.” That would imply that there’s a problem on eBay’s end, and they have some sort of security hole that this guy exploited. If that’s the case, it’s an issue that eBay might want to address, because it could put other people at risk. However, the article barely focuses on that part at all, so it’s possible that this was a more typical scam (phishing, perhaps) that allowed the guy to get account info and credit cards. Still, it would be nice to know whether or not others are at risk.