Need Technical Advice for Ebay... • Collecting General • The Acaeum

The Acaeum Forums • Collecting General

Need Technical Advice for Ebay...
	Page 1 of 1

Author

Invincible Overlord
Verbose Collector
JG Valuation Board
Acaeum Donor

Posts: 1624
Joined: Aug 19, 2008
Last Visit: Aug 21, 2023
Location: Chicago, IL

Posted: Wed Sep 23, 2015 2:45 pm

I've had my Ebay account for at least 15 years now, and over the last few months (for the first time ever) I've had my account hacked twice in a 3-month period. No damage to the account has occurred yet.

I've changed both the passwords for my e-mail address and Ebay account. I've reported the hacks to Ebay customer service.

I'm running Mozilla, No-Script, and Ad-Blocker through AVG software (so on the up-and-up I think I have everything covered...

However when I click on the "My Ebay" icon at the top of the main Ebay page, it goes from the Https (secure) to this at the top of the page:

my.ebay.com/ws/eBayISAPI.dll?MyEbay&gbh=1 (Notice it doesn't indicate the https [secure] or the green color icon for [secure])

And also, No-Script filtered a potential cross-site scripting (XSS) attempt from [http/my.ebay.com]

I'm going to report this to Ebay... it's really irritating...

Any other suggestions are welcome!

RPGâ€™s, D&D in particular has had a major influence in my life. Itâ€™s bonded me together with life long friends...itâ€™s that bond in life not just as friends, but in our jokes, our mannerisms, and what we find funny. Invincible Overlord

FoulFoot
Site Admin

Posts: 2308
Joined: Oct 19, 2002
Last Visit: Aug 07, 2026
Location: Honolulu, HI

Posted: Wed Sep 23, 2015 2:56 pm

eBay only uses SSL (https://) on the sign-on pages. After that, you're dumped back to unsecure http. So your password information is transmitted securely.

The "My eBay" link uses a subdomain ("my.ebay.com") of the main ebay.com site. So it's not redirecting you to a harmful site; you're still on eBay.

Quite a few major sites out there do not use SSL, use it only partially (like eBay), or use it incorrectly (you'll notice "https" is crossed out in your browser address bar, and no green lock icon; this usually occurs when SSL-enabled sites are attempting to pull unsecured content, like images, from another site or subdomain).

In short, the source of your hacked username / password lies elsewhere, and was not derived from someone snooping on your wifi connection while you logged in to eBay.

Foul

JasonZavoda
Long-Winded Collector
JG Valuation Board

Posts: 3823
Joined: Jul 12, 2007
Last Visit: Dec 17, 2021

Posted: Wed Sep 23, 2015 6:31 pm

Have you ever signed into ebay when linking from an email or another site?

"You get more with a kind word and an excruciator than with just a kind word."

cdenham
Prolific Collector
Acaeum Donor

Posts: 595
Joined: Mar 12, 2007
Last Visit: Mar 31, 2026
Location: Alabama

Posted: Wed Sep 23, 2015 7:04 pm

I have heard of something similar when using a snipe service. It has not happened to me like that yet fortunately.

Carpe DM!

Invincible Overlord
Verbose Collector
JG Valuation Board
Acaeum Donor

Posts: 1624
Joined: Aug 19, 2008
Last Visit: Aug 21, 2023
Location: Chicago, IL

Posted: Fri Sep 25, 2015 2:54 pm

JasonZavoda wrote in Need Technical Advice for Ebay...:Have you ever signed into ebay when linking from an email or another site?

I try to avoid the "phishing scam" fake ebay e-mails that I get to my e-mail account.

It's a possibility that I might have accidently clicked on it... once... which started this whole nightmare...

I just log on to ebay directly now.

JasonZavoda
Long-Winded Collector
JG Valuation Board

Posts: 3823
Joined: Jul 12, 2007
Last Visit: Dec 17, 2021

Posted: Sat Sep 26, 2015 10:19 am

Invincible Overlord wrote in Need Technical Advice for Ebay...:
JasonZavoda wrote in Need Technical Advice for Ebay...:Have you ever signed into ebay when linking from an email or another site?

I try to avoid the "phishing scam" fake ebay e-mails that I get to my e-mail account.

It's a possibility that I might have accidently clicked on it... once... which started this whole nightmare...

I just log on to ebay directly now.

It is a very effective scam. It is so tempting to respond from email.

"You get more with a kind word and an excruciator than with just a kind word."

aspekt
Prolific Collector

Posts: 117
Joined: Aug 23, 2015
Last Visit: Dec 06, 2016

Posted: Sat Sep 26, 2015 10:29 am

Something I am sure you know, but just in case, don't forget to clear your cache/history+passwords on your browser regularly if you keep having trouble. Especially if you have it set to auto login on ebay.

The Acaeum Forums • Collecting General

Page 1 of 1