topic Re: Is it pointless JUST changing password ? in Selling

Is it pointless JUST changing password ?

poppy-3348 — Sun, 25 May 2014 00:39:07 GMT

As hackers already have your private info stored since February and only now ( May) after the damage has been done Ebay

requests change.

Ebay should have requested user Id and password. Starting afresh.

Your views / thoughts. regards Poppy.

Re: Is it pointless JUST changing password ?

lyndal1838 — Sun, 25 May 2014 00:53:34 GMT

Are you suggesting that everyone should close their account and open a new account with a new ID?

If the hackers have your name, address and phone number how hard would it be to cross reference those details to a new ID, or are you suggesting we also change our personal details too?

If you are suggesting that we all just change our IDs on our current accounts then that is pretty useless....ID changes are are noted on your account for all to see.

Re: Is it pointless JUST changing password ?

clarry100 — Sun, 25 May 2014 00:58:17 GMT

When passwords are stored in secure databases they are encrypted.

That means that anyone that has gotten hold of that database still has to de-crypt them to be able to use them. That is very difficult to do unless you also have the encryption keys/algorithms used to encrypt them in the first place.

So IMHO its of little concern that someone has obtained the passwords database. Its unlikely they can make any real use of them. It has been a number of months now since this break-in took place and there are no related reports of use of stolen passwords.

What is more concerning is that they might have also obtained your personal details stored on file that are not encrypted.

Things like: email addy, home address, phone numbers and the like.

So you may get bombarded with phishing attempts using these email addresses etc. But the usual rules apply:

NEVER click on links in embedded emails unless you are 110% sure of who the sender is and even then be careful. And hang up on phone calls if they are suspicious. Junk mail throw it out.

IMO its a big media beatup designed by ebay to get some free air time and advertising. People who may have not used their account in a long might log in to change their password and while they are at it, have a browse and buy.

Re: Is it pointless JUST changing password ?

go-tazz — Sun, 25 May 2014 01:11:23 GMT

If you change your password then your ID becomes secure again,(so there is no need to change it).

The hackers wont attempt to try and get your new password as they'll have thousands of dormant account that

they'll be able to access easily.

They can then use these to scam members or on sell them.

Your user ID without the correct password is near useless to a hacker/scammer.

The only way they might use your name and ID together is for Email phishing attempts,(but you should never

click on a link in any Email so that only gets the gullible)

Identity theft might be the main issue due to the hacker/s,