(old)Puppy Linux Discussion Forum

eBay Inc has in the last few hours have confirmed in an announcement that they have been compromised and that users will need to take action to protect themselves. The compromise, which took place sometime between late February and early March allowed the attackers access to customers names, e-mail addresses, encrypted passwords, e-mail addresses, postal addresses, phone numbers and date of births. In other words sufficient data to potentially cause havoc on your online and offline life .

When LinkedIn lost >5M password hashes over 60% of them were broken within two days of the breach . In my role as a security researcher and tester I’ve often fired up cracking tools and a single laptop to hunt password hashes (with permission and I should add with great success) but imagine what the cyber criminals can achieve with their substantial botnets (large networks of computers running remote control code that can be tasked with anything the cyber criminal wants) and the benefit of time on their side. For every moment that you do not change your password you are racing the vast computing power of a criminal gang and time itself. In short, it is undoubtedly best to assume that your password has been compromised, to check over your account for any strange signs and then change your password as quickly as possible

eBay.com wrote:Important - eBay Password Reset Required

Here's what we know: This attack occurred between late February and early March and resulted in unauthorized access to a database of eBay users that includes customers' name, encrypted password, email address, physical address, phone number and date of birth.