3 ms·

FWIW, "ebayinc.com" totally screams "phishing attempt" to me.

• jcr 12y ago
  It is a legit ebay domain, but without https, verifying it is tougher. This announcement actually leaked when a "placeholder" was put up on the paypal-community.com forum: https://news.ycombinator.com/item?id=7777182 https://news.ycombinator.com/item?id=7777182 And I did some simple tests to make sure that domain was really ebay/paypal: https://news.ycombinator.com/item?id=7777419 https://news.ycombinator.com/item?id=7777419
• droopyEyelids 12y ago
  You have to remember that eBay is an ancient tech company run by the old MBA types that didn't really understand what value to place on engineering. All their internal systems are maintained by vendors, VARs, and contractors. So weird stuff like the ebayinc.com domain is to be expected. As is this hack. Also it'd be interesting to know how it was detected, and how the extent of access was determined. But if my prediction is correct, we will never see a truly open blog post about it. First, because it's not clear to me that eBay "infosec" is up to the task. Second, because eBay believes more in compartmentalization, secrecy, misdirection etc. than 'openness'.
  • oneeyedpigeon 12y ago
    Take a look at ebay's Account Management interface. Remember what it was like to use the web 15 years ago. Bear in mind that ebay owns PayPal which has quite possibly the worst api I've ever used, along with an interface that is even worse than ebay's. Wonder what the hell this company is doing other than lying back and counting the dollars. If it wasn't for a tiny amount of 'reputation' which might make others more willing to deal with me, I'd close my ebay account right now.
• lbarrow 12y ago
  It's an investor relations-ey site.