Macromedia Goes After eBay Sellers With Contribute 3
5150
Macromedia made a play for eBay sellers Monday by debuting a custom version of its Contribute 3 Web content publishing application that&#39;s designed to speed the creation and upkeep of eBay Stores.
319806
Online finance service PayPal, used by mainly people on eBay, introduces a security token to tackle fraud.
734100
Auction company is apparently drawn to the classifieds model pioneered by community resource site.
330983
Will dirty dealers scare eBay users off?
473390
EBay is moving to quell a wave of discontent among individuals and small merchants who sell on the leading online auction Web site.
702102
Blog: eBay takes the top spot as a Web services provider although Microsoft continues to maintain developer loyalty.
679593
(InfoWorld) - Questions abound overÂ the posting of confidential information from eBay members on one of the vendor's discussion forums, a sinister incident that has many of the online marketplace's buyers and sellers worried. Although eBay has provided some information about the brazen dump of member data that happened Tuesday morning, it's not known who the culprit is nor how and when this person obtained the information. Even more troubling: What has this "malicious fraudster," as eBay describes the person, already done with the names, addresses, member IDs, and possibly credit card numbers of at least 1,200 eBay buyers and sellers? Moreover, is this person still exploiting whatever hole, trick, or vulnerability led him to the data? Does he have data on just the 1,200 members listed or possibly on many more? "What makes this a big deal isn't just the amount of data compromised, but rather that this involves eBay," said computer security expert Mark Rasch, managing director of technology at FTI Consulting. As the world's largest online marketplace, eBay stores financial data on millions of users, and its platform is used to transact billions of dollars in sales. "Irrespective of the scope [of the data breach], the target makes it significant," Rasch said. This much is known: On Tuesday morning, someone posted confidential information on about 1,200 eBay members in the company's Trust & Safety discussion forum. Based on the initial reports of frantic users on this long thread, it appears that the "fraudster" posted data for about one hour until eBay shut the forum down. Hours later on Tuesday, an eBay spokeswoman confirmed the incident and said the vendor knew for a fact that the information wasn't obtained by breaching eBay's security systems, suggesting instead that the culprit stole the information from others via methods, such as phishing. However, many users have expressed skepticism in the forums over eBay's prompt declaration that its systems weren't hacked into. Rasch shares this skepticism. "I'd be reluctant to declare six hours after [such an incident] that my systems weren't breached unless I definitely knew what had happened or had already caught someone," he said. There can be many ways for someone to obtain this confidential data, including hacking a system and tricking individuals into disclosing the information via phishing, he said. It could also be a case of an inside job perpetrated by a disgruntled or corrupt employee at eBay or elsewhere with access to a database containing this data. "eBay has to thoroughly and comprehensively investigate this and keep people advised of what it finds and take corrective actions," Rasch said. This doesn't mean that eBay must provide hourly updates on the progress of its investigation, he said. However, eBay must at some point publicly close the loop on the incident and explain the scope of the damage and the causes. It's unclear if eBay intends to reveal more details about the breach. Beyond the spokeswoman's comments on Tuesday, the only other eBay statement on the matter is an official blog post made a few hours after the incident. By press time, eBay hadn't responded to several requests for comment on Wednesday. Jonathan Garriss, executive director of the Professional eBay Sellers Alliance, agrees that eBay must inform users about the issue. "eBay really needs to address this publicly at some point and say where the leak came from," said Garriss, also CEO of Gotham City Online, an apparel store on eBay that also has its own site. That way, buyers and sellers will feel that the issue was addressed and remedied. It's clear that the data thief, in addition to profiting from the compromised information, also wanted very much to embarrass eBay by using the vendor's discussion forum for security issues as the vehicle for the data disclosure. "It was very brazen and very public," Rasch said. On Tuesday, the eBay spokeswoman said that the credit card numbers disclosed didn't match with the ones eBay has on file for the affected members. This brings up another question: Even if the numbers don't match the members, does eBay know if those numbers are nonetheless valid? Once data is posted on a public Web site, it must be assumed that others with malicious intentions copied it. "The bottom line is that this data is in the hands of people who shouldn't have it," Rasch said.
63357
More on Yahoo Search Ads &#038; PayPal Icons Today it was spotted that Yahoo Search Marketing is testing Google Checkout style PayPal Shopping Cart icons on some of the eBay.com advertisements in Yahoo Search results. The sighting generated some buzz in the search marketing world as the icons do not only show that the Yahoo eBay [...]
248382
EBay is making changes in its fee structure to encourage sellers to list more items and attract more buyers.
143109
Site Offer Save a whopping 50% on definitive MySQL guides
531535
Phisher 'Vladuz' dodges eBay's defenses &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
259064
eBay sellers have a new content management tool to help them post storefronts faster, thanks to a newly customized Macromedia toolset.
254638
Macromedia Inc. plans to announce Monday a special version of its Contribute Web publishing desktop application designed to automate and simplify the creation and modification of eBay Inc.
578705
He's ba-ack A hacker has once again managed to pilfer eBay credentials that allow him to masquerade as an official company representative even as he taunts eBay officials on the company's message boards. It's at least the second time the person going by the name Vladuz has pulled off the prank, which is causing many users to question the adequacy of eBay security.â¦
497821
Alternative browser features protection against online scams.
611971
Although frankly I really didn't feel the need to read the entire thread, I can tell you that the posting to the PHP 3 mailing list is related to the Smarty Templating Engine back in the day. In fact, I believe this was the original spec Andrei proposed before Smarty even existed. Although I don't remember the exact e-mail, this posting reminded me that there was a point in time I thought exactly this way... quoting myself:
287454
We've got two more entries this week in the category of "What weird, useless stuff is for sale on eBay that I just have to have?"