eBay userbase information hacked, change your password immediately!

[Cartmanuk]

wtf ebay owns gumtree??!

Yeah they got there grubby fingers in every1's pies

 

[WiiCube_2013]

So now hackers know a password even I am not certain of.
...yeah without auto-login I can't get on my account.

Same.

I can't remember phone numbers too unless I'd use them too often.

 

[Satangel]

I'll look in to it. So basically, use random passwords for everything but keep them under 1PW? But what if 1Password gets breached?

Any recommended PW generators?

The thing with those Password managers I don't trust/know about is how do I log-in from another location? Sometimes I'm at a random PC somewhere in the world, how do I login then, without 1Password or whatever?

 

[Qtis]

The thing with those Password managers I don't trust/know about is how do I log-in from another location? Sometimes I'm at a random PC somewhere in the world, how do I login then, without 1Password or whatever?

1Password is compatible with Dropbox. You can share your encrypted password vault on other devices and use a browser plugin if need be. I usually just use my Android app Instead Of a plugin if I need a password I don't automatically remember, but I digress.

 

[Jiehfeng]

Done! Thanks.

 

[Satangel]

1Password is compatible with Dropbox. You can share your encrypted password vault on other devices and use a browser plugin if need be. I usually just use my Android app Instead Of a plugin if I need a password I don't automatically remember, but I digress.

Oh, the Android app is interesting. It'll cost me some bandwidth/battery but I guess it's much better than not being able to access sites when I'm on the go.
It's usually PC's that don't allow anything installed onto them, public PC's. So installing Dropbox or a browser plug-in is frowned upon.
But the Android app, that's brillaint!

I'll search what's the best one, KeepPass keeps popping up, never heard of 1Password tbh. We'll see, thanks!

 

[Qtis]

Oh, the Android app is interesting. It'll cost me some bandwidth/battery but I guess it's much better than not being able to access sites when I'm on the go.
It's usually PC's that don't allow anything installed onto them, public PC's. So installing Dropbox or a browser plug-in is frowned upon.
But the Android app, that's brillaint!

I'll search what's the best one, KeepPass keeps popping up, never heard of 1Password tbh. We'll see, thanks!

FYI, once you download the vault, it's accessible offline. At least that's how it's with 1Password, which I've used for about 3+ years. But as 1Password is a paid app, a free one may be preferred if you aren't able to pay for it. The security is top notch in most cases since the crypto is open source and is updated constantly.

I'll update the OP if and when more information becomes available on the hacking itself.

 

[Satangel]

FYI, once you download the vault, it's accessible offline. At least that's how it's with 1Password, which I've used for about 3+ years. But as 1Password is a paid app, a free one may be preferred if you aren't able to pay for it. The security is top notch in most cases since the crypto is open source and is updated constantly.

I'll update the OP if and when more information becomes available on the hacking itself.

That's wonderful, I've got my USB stick and/or smartphone with me at all times, so can very easily put that file on there.

I'll have to look into the apps, free or paid doesn't matter, on Android everything is 'free'
And IIRC I used to own an EZ IV, maybe I can help you with it. Or maybe I already sold it, I'll have to check

 

[hippy dave]

They don't publicise it as much as other sites like gmail, but you can (and should) set up two-step authentication on eBay and PayPal. Then to log in you need to enter both your password and a code from your phone (either from a text message or from the Symantec VIP Access app). Basically nobody can log into your account if they don't have your phone (AND know your password).

 

[Mythrix]

They don't publicise it as much as other sites like gmail, but you can (and should) set up two-step authentication on eBay and PayPal.

I found the link for that for the US site, but after a few clicks I got redirected to my country's site and apparently we cannot get the security code on our phones, we only get the option of use that security key dongle that is not free. *sigh*

Password changed in any case. Kind of glad that I didn't change it back then because eBay apparently wasn't affected by Heartbleed and I (almost) never use the same password for multiple sites.

 

[Vipera]

So the passwords are encrypted? Good luck with that, I don't use passwords less than 12 characters long.

 

[spotanjo3]

That's fine. I just removed my credit card from paypal until I decided to use it again to be safe. I haven't used Paypal for over 6 years now. For Ebay login, nothing's important there so I am fine.

 

[hippy dave]

I found the link for that for the US site, but after a few clicks I got redirected to my country's site and apparently we cannot get the security code on our phones, we only get the option of use that security key dongle that is not free. *sigh*

Password changed in any case. Kind of glad that I didn't change it back then because eBay apparently wasn't affected by Heartbleed and I (almost) never use the same password for multiple sites.

See if you can do it using the app, it's pretty much equivalent to the dongle. And even more badly publicised.

 

[DinohScene]

Resetted me password some 12 hours ago.
Then I found out Ebay doesn't have that list of saved searches when you log in and clicked on the Ebay logo :c

 

[mysticwaterfall]

And another one bites the dust, I guess. Ebay isnt bad, but as mentioned paypal is annoyning to change passwords on.

For password managers I use Keepass. 100% free, open source, and offline. So no worries about not having access to your vault if a server goes down or your vault getting hacked by being in the cloud. It can even run portably on a flashdrive if youre away from home.
Set it up on my computer, transferred the vault to my phone via usb and installed the app, done.

http://keepass.info/

 

[Sheimi]

Changed my password. I don't have my paypal linked to my ebay yet at all. (Glad I never did). Hackers ain't gonna get much from what I make a week. Which is barely nothing. Unless they like $10 - $15 funds leftover every week.

 

[CompassNorth]

I still haven't changed my password from the heartbleed bug conspiracy.
I will not fall for this one either.

 

[Deleted-236924]

I still haven't changed my password from the heartbleed bug conspiracy.
I will not fall for this one either.

Not sure if joking or just stupid...

 

[CompassNorth]

Not sure if joking or just stupid...

Not sure if sheeple or just stupid.

 

[Tom Bombadildo]

I still haven't changed my password from the heartbleed bug conspiracy.
I will not fall for this one either.

Oh god, that's great. Good on you.


Don't care much about eBay, I don't have any payment info saved to it or anything so I don't care too much. Like others ITT, I use auto-login so I don't really remember what my password is anyways.