RE: eBay Security Contact

From: Anthony Patti (gps_at_augustmail.com)
Date: 05/01/03

  • Next message: Michael Howard: "Integer Manipulation Attacks"
    To: <mattmurphy@kc.rr.com>, <bugtraq@securityfocus.com>
    Date: Thu, 1 May 2003 15:07:55 -0500
    
    

    +-----Original Message-----
    +From: mattmurphy@kc.rr.com [mailto:mattmurphy@kc.rr.com]
    +Sent: Thursday, May 01, 2003 12:26 PM
    +To: full-disclosure@lists.netsys.com; bugtraq@securityfocus.com
    +Subject: eBay Security Contact
    +
    +
    +Hello,
    +
    +I'm looking for contact information for the security department (if such a
    +thing exists) at eBay. If anyone has any security contact information
    +(specifically, I'm looking for e-mail addresses), or just general
    +"support"
    +information where I can reach a human -- as such information appears to be
    +deeply buried. I'm really starting to become frustrated by the lack of
    +support; everything they have is automated/robotic, and even that doesn't
    +really

    Matt,

    You can use spoof@ebay.com. This is the address used to report the phony
    Russian eBay e-mails claiming to be from eBay Billing saying that your
    credit card was declined...yadda-yadda.
    They do respond with a human reply and name along with the boilerplate
    response.

    And yes it is buried.

    Tony


  • Next message: Michael Howard: "Integer Manipulation Attacks"

    Relevant Pages

    • Portcullis Security Advisory 05-012 Ebay Session Riding Vulnerability
      ... Portcullis Security Advisory ... This vulnerability affects EBay the auction websites. ... Portcullis have working POC code for this issue, however, this will not ...
      (Bugtraq)
    • Re: Account Hijacked
      ... Eventually pieced together what had happened from eBay security e-mails and the log of my seller account..... ... At 9.15pm eBay had spotted this. ... Took about an hour to understand what had happened, change my eBay & Paypal passwords, change my secret questions etc. Credit to eBay for a very clever ringback system - automated call gives you a one-time PIN to access & reset the account. ... My old password was medium secure, but would I'm sure be breakable by a serious attacker. ...
      (uk.people.consumers.ebay)
    • Re: REVIEW: "Network Security Essentials", William Stallings
      ... Meaning that so-called Internet security ... If you try to make a VISA payment ... Ebay does a "charge back" to a seller who is not in- ... talk about network security is just silly. ...
      (comp.security.misc)
    • Re: REVIEW: "Network Security Essentials", William Stallings
      ... Meaning that so-called Internet security ... If you try to make a VISA payment ... Ebay does a "charge back" to a seller who is not in- ... talk about network security is just silly. ...
      (alt.computer.security)
    • [Full-Disclosure] RE: eBay Security Contact
      ... +Subject: eBay Security Contact ... +support; everything they have is automated/robotic, ... Russian eBay e-mails claiming to be from eBay Billing saying that your ...
      (Full-Disclosure)

  • Quantcast