Bad day at eBay

It was someone using Jay's password, I'm certain of it... :)
 
Maybe this is why we didn't our daily 10 questions out of SixPappaCharlie
 
I saw that, I don't use eBay much, but changed my password anyway.:D
 
Don't forget the other companies eBay owns... Such as paypal
 
Maybe this is why we didn't our daily 10 questions out of SixPappaCharlie

No, it was just a busy day at the office.
I should get plenty bored again tomorrow.

I have a slew of questions that have nothing to do with aviation ready to pose to aviators :)
 
One thing this most recent breach highlights is the need for federal legislation (yes, that's coming from me -- not a big believer in laws) to guarantee consumers the right to have their information deleted from the servers of companies with which we no longer wish to do business.

Not that I'm going to close my eBay account because of this, but I've been doing battle with several other companies with whom I no longer have a business relationship, but who refuse to delete my accounts. They'll "deactivate" them, which is not the same thing. What I want is for my information to be gone from their servers -- not just "deactivated."

This most recent data breach represents the fifth time (that I know of) that my personal information has been compromised due to cybercrime. It's starting to get monotonous. And every server on which personal data resides represents another chance that users' information will be compromised. We need the right to permanently delete -- not just "deactivate" -- accounts that we no longer want.

I suppose eBay will eventually offer a free year of identity theft protection to all their customers, which I hope I'll be able to tack on to the end of my existing free account that I received when my data was compromised in the Target incident, which was itself an extension of the free account I received when my data was compromised in the Adobe incident. If eBay offers users a year to take them up on their offer, I can wait until the current freebie expires, and then tack on the eBay freebie to extend it.

-Rich
 
Thanks for the heads up. I changed my eBay and Paypal passwords. While I was at it, I changed my Amazon password, which was very weak.
 
I'm not a computer guy by any stretch of the imagination...but I have a hard time understanding why it took almost three months for eBay to make this public.

I wonder when they first knew...
 
Could have something to do with their operations head being incompetent and running around the country supporting her pet projects instead of doing her job... But I'm sure she'd say I was a male bully for saying so. :)

Could also be that there's no incentive for eBay to be run well. It's entrenched as the place to go for online auctions. That can change, but the public isn't really even noticing or caring if security breaches happen these days. There's a week of Internet posts about it, and everyone moves on.
 
Ebay is a has-been. I haven't bought anything on there for years.
 
I have, but only Buy It Now crap someone sent me a link to. Amazon gets far more traffic from here, especially since we have Prime. Before that I'd switched over to using a sniping service. Bid on crap? Who has time. Stick a price in and let the sniping site do it. LOL
 
One thing this most recent breach highlights is the need for federal legislation (yes, that's coming from me -- not a big believer in laws) to guarantee consumers the right to have their information deleted from the servers of companies with which we no longer wish to do business.

Not that I'm going to close my eBay account because of this, but I've been doing battle with several other companies with whom I no longer have a business relationship, but who refuse to delete my accounts. They'll "deactivate" them, which is not the same thing. What I want is for my information to be gone from their servers -- not just "deactivated."

This most recent data breach represents the fifth time (that I know of) that my personal information has been compromised due to cybercrime. It's starting to get monotonous. And every server on which personal data resides represents another chance that users' information will be compromised. We need the right to permanently delete -- not just "deactivate" -- accounts that we no longer want.

I suppose eBay will eventually offer a free year of identity theft protection to all their customers, which I hope I'll be able to tack on to the end of my existing free account that I received when my data was compromised in the Target incident, which was itself an extension of the free account I received when my data was compromised in the Adobe incident. If eBay offers users a year to take them up on their offer, I can wait until the current freebie expires, and then tack on the eBay freebie to extend it.

-Rich

I believe at one time paypal would generate you a "throw away" one time use CC number. They discontinued it. Anyone know of another service like that? Maybe one that stays on but you can flip off anytime. I.e. Generate a new number for signing up for a recurring charge service and don't use it anywhere else. Then just trash the number when you're done with them.

Magnetic strips on pieces of plastic is crude technology too. I don't see a reason why we can't marry a swipe/read to one business for a single purchase or recurrent payments.

I see many ways around the problem without regulation.
 
I believe at one time paypal would generate you a "throw away" one time use CC number. They discontinued it. Anyone know of another service like that? Maybe one that stays on but you can flip off anytime. I.e. Generate a new number for signing up for a recurring charge service and don't use it anywhere else. Then just trash the number when you're done with them.



Magnetic strips on pieces of plastic is crude technology too. I don't see a reason why we can't marry a swipe/read to one business for a single purchase or recurrent payments.



I see many ways around the problem without regulation.


I think Amex still has em.
 
If eBay has something I want, I buy it, but only if it has a "Buy it Now" option. I did use the "Make an Offer" option on something recently, which was accepted. I have bought a few items in the past few months. The few times I have tried to buy auction items, it just seemed like a waste of time.
 
I believe at one time paypal would generate you a "throw away" one time use CC number. They discontinued it. Anyone know of another service like that? Maybe one that stays on but you can flip off anytime. I.e. Generate a new number for signing up for a recurring charge service and don't use it anywhere else. Then just trash the number when you're done with them.

Magnetic strips on pieces of plastic is crude technology too. I don't see a reason why we can't marry a swipe/read to one business for a single purchase or recurrent payments.

I see many ways around the problem without regulation.

That's not quite what I'm talking about. I'm talking about companies with whom you no longer have any business relationship, but who refuse to delete your account.

For example, not long ago, I made some changes in my retirement planning. In the process of doing so, I considered several financial services companies, all of whom needed some of my personal information in order to make intelligent recommendations for me. Typically this would be name, address, phone number, DOB, SSN, and some financial information.

In the end, I decided on Fidelity. (I haven't regretted that decision, by the way. They're a great outfit.) I sent the rest very nice thank-you letters informing them that I'd settled on another company, and asking that they please delete my information from their records. All except one obliged. The one that didn't claims they can't because of unspecified "federal laws." They would "deactivate" my non-existent account, but not delete it.

Financial services companies are required to keep records and to make reports to the IRS and others -- once an account actually exists. But as far as I know, there are no federal laws requiring that financial services companies keep records of every person they ever talked to, even if that person decided not to open an account. The fact that all the houses except one deleted my information upon my request sort of backs up my suspicion.

The problem is that apparently there's no way for me to force them to delete my information, at least not as long as they claim to be legally required to retain it (even if they're wrong). There's no law recognizing a person's right not to have his or her personal information on someone else's server once there's no remaining legal or business need for it to be there. I believe that people should have that right.

-Rich
 
The problem is that apparently there's no way for me to force them to delete my information, at least not as long as they claim to be legally required to retain it (even if they're wrong). There's no law recognizing a person's right not to have his or her personal information on someone else's server once there's no remaining legal or business need for it to be there. I believe that people should have that right.
Isn't this another example of how regulation has not kept up with technology? In the old days, companies could have kept paper records of their contact with you forever and you probably wouldn't have cared. But now, since that information can be more easily compromised, it is more of an issue.
 
Isn't this another example of how regulation has not kept up with technology? In the old days, companies could have kept paper records of their contact with you forever and you probably wouldn't have cared. But now, since that information can be more easily compromised, it is more of an issue.

Exactly.
 
Maybe it would work to tell them you are "correcting" the info they have on file, and give them phony info.
 
Back
Top