4 ms·

Tell HN: EBay offer mechanism is insecure

eBay allows sellers to provide an offer mechanism for the buyers. Exchanges between them are also communicated over email. I noticed today that accepting offer redirects to a insecure http://offer.ebay.de where I was able to accept the offer.

DrScump 9y ago
eBay is not known for their attention to security. https://www.nytimes.com/2014/05/22/technology/ebay-reports-attack-on-its-computer-network.html https://www.nytimes.com/2014/05/22/technology/ebay-reports-a... https://www.cnet.com/news/ebay-hacked-requests-all-users-change-passwords/ https://www.cnet.com/news/ebay-hacked-requests-all-users-cha... https://www.consumeraffairs.com/news/ebay-hacked-again-bbc-reports-hijacked-seller-accounts-092314.html https://www.consumeraffairs.com/news/ebay-hacked-again-bbc-r... That said, I wonder whether that particular exposure is limited to eBay Germany or is paralleled worldwide.