4 ms·

Probably password dump and fraud attempt on eBay side. They aren’t going to explain that to hackers. I had the same thing and I managed to reactivate after I pi

by aynyc 4y ago

Probably password dump and fraud attempt on eBay side. They aren’t going to explain that to hackers. I had the same thing and I managed to reactivate after I pinged support. It was rather painless than I was expecting. I don’t have a lot of love for eBay.

amerkhalid 4y ago
> They aren’t going to explain that to hackers. The idea of security through obscurity needs to die. I wish companies shared their logic behind these decisions. Sure bad people will take advantage of it in short-term. But, in long-term, most of the loopholes should be discovered and fixed.
- kube-system 4y ago
  Fraud is not a well-bounded problem like authentication. There is no cryptographic way to prevent fraud. Using behavioral analytics is about the best you can do from behind a keyboard, and if you share the way you're measuring it, people can change their behavior to work around it. One alternative is to put more onerous restrictions on users, so that it is hard or expensive for them to buy or sell on eBay, in which case people may just buy/sell elsewhere. The other alternative is to insert more humans into the process, at which point, you start to look less like an auction website and more like an auction house.
  - ipaddr 4y ago
    They prevent fraud through authentication. If authentication is unreliable then behavior matters. But behaviour is more easily gamed and abused and has more false negatives affecting customers.
    - kube-system 4y ago
      The process of transacting physical items has many opportunities for fraud that isn't addressed even by perfect authentication in any way. This is where eBay's tough problems arise.
casenmgreen 4y ago
I don't think it's that. I think they don't explain, anyway, at all, for anything, simply because they don't; there's no motive to do so - it's just more work.
reustle 4y ago
> Probably password dump and fraud attempt on eBay side. So then send a confirmation email when logging in after a while. If the email is also compromised, it's not eBay's problem.

by aynyc 4y ago

amerkhalid 4y ago

> They aren’t going to explain that to hackers. The idea of security through obscurity needs to die. I wish companies shared their logic behind these decisions. Sure bad people will take advantage of it in short-term. But, in long-term, most of the loopholes should be discovered and fixed.

kube-system 4y ago
Fraud is not a well-bounded problem like authentication. There is no cryptographic way to prevent fraud. Using behavioral analytics is about the best you can do from behind a keyboard, and if you share the way you're measuring it, people can change their behavior to work around it. One alternative is to put more onerous restrictions on users, so that it is hard or expensive for them to buy or sell on eBay, in which case people may just buy/sell elsewhere. The other alternative is to insert more humans into the process, at which point, you start to look less like an auction website and more like an auction house.
- ipaddr 4y ago
  They prevent fraud through authentication. If authentication is unreliable then behavior matters. But behaviour is more easily gamed and abused and has more false negatives affecting customers.
  - kube-system 4y ago
    The process of transacting physical items has many opportunities for fraud that isn't addressed even by perfect authentication in any way. This is where eBay's tough problems arise.

casenmgreen 4y ago

I don't think it's that. I think they don't explain, anyway, at all, for anything, simply because they don't; there's no motive to do so - it's just more work.

reustle 4y ago

> Probably password dump and fraud attempt on eBay side. So then send a confirmation email when logging in after a while. If the email is also compromised, it's not eBay's problem.