But I actually think it's the volume by which eBay asks for your username and password, that opens them up to fraud. It should be a security gateway that promp

But I actually think it's the volume by which eBay asks for your username and password, that opens them up to fraud. It should be a security gateway that prompts the user to get ready for some secure transactions. But it is asked for so many times that it becomes an afterthought, "Oh, eBay is asking for my password again." It asks when you want to view My eBay. It asks when you want to save an item for later. It asks when you place a bid. It asks again when you check out after winning. Then you get a phishing email, you click a link, it asks for your password. Users give it up without a second thought because they're so used to providing it. Conversely, Amazon, another site which is very good at separating you from your money, only asks when money is on the line. I can add to Wish Lists without logging in again. I can rate things without logging in again. I can write reviews without logging in again. The only time Amazon asks for my password is when I'm placing an order, or making changes under My Account. And they even have an express lane setup for making orders with PayPhrase, that doesn't ask for my login again, just a PIN.