3 ms·

Just changed it. I don't understand why eBay (and others) don't offer two-factor authentication. Of course this wouldn't have prevented the data theft but at

Just changed it. I don't understand why eBay (and others) don't offer two-factor authentication. Of course this wouldn't have prevented the data theft but at least one can have a reasonable degree of certainty that your individual account will not be compromised with a simple password. I also strongly suggest that you change the answer to the one-and-only secret question to something completely unrelated. For example, if the question is "What's the name of your high school?" the answer could be "violet and purple are similar". In other words, make it impossible to socially engineer the answer to such questions. I wonder if these answers were also stolen.

watersb 12y ago
> I don't understand why eBay (and others) don't offer two-factor authentication eBay implements 2-factor auth via a PayPal s/Key hardware token. https://www.paypal.com/securitykey https://www.paypal.com/securitykey
- robomartin 12y ago
  Doesn't that just protect PayPal? How does it protect from someone social-engineering their way into your eBay (not paypal) account through, say, customer service?
jacquesm 12y ago
I don't understand why after a breach of this magnitude people continue to use a service, but just change their passwords and then move on.
- chrissyb 12y ago
  What is the new eBay? That's a serious question too, not rhetoric.
  - jacquesm 12y ago
    Excellent question, I had ebay in a post I was preparing, I've updated the text and bit and posted it. http://jacquesmattheij.com/ripe-for-disruption http://jacquesmattheij.com/ripe-for-disruption Ebay has been setting itself up for failure for a long time now, but I'm not surprised that people decided not to take on Goliath. But with this incident there might just be an opportunity to swing the scales in favour of a new entrant.
    - chrissyb 12y ago
      Hey good read - particularly agree with alot of the points you make. eBay's UI and design - whats going on there? Its OK by 2002 standard but i just feel like i'm browsing a Geocities shopping cart. I'm looking forward to disruption here!

watersb 12y ago

> I don't understand why eBay (and others) don't offer two-factor authentication eBay implements 2-factor auth via a PayPal s/Key hardware token. https://www.paypal.com/securitykey https://www.paypal.com/securitykey

robomartin 12y ago
Doesn't that just protect PayPal? How does it protect from someone social-engineering their way into your eBay (not paypal) account through, say, customer service?

jacquesm 12y ago

I don't understand why after a breach of this magnitude people continue to use a service, but just change their passwords and then move on.

chrissyb 12y ago
What is the new eBay? That's a serious question too, not rhetoric.
- jacquesm 12y ago
  Excellent question, I had ebay in a post I was preparing, I've updated the text and bit and posted it. http://jacquesmattheij.com/ripe-for-disruption http://jacquesmattheij.com/ripe-for-disruption Ebay has been setting itself up for failure for a long time now, but I'm not surprised that people decided not to take on Goliath. But with this incident there might just be an opportunity to swing the scales in favour of a new entrant.
  - chrissyb 12y ago
    Hey good read - particularly agree with alot of the points you make. eBay's UI and design - whats going on there? Its OK by 2002 standard but i just feel like i'm browsing a Geocities shopping cart. I'm looking forward to disruption here!