Ebay 'Claim' to Have Fixed Security Hole Exploited by 'Vladuz' Ebay has claimed to have fixed a security hole on their front page that allowed scammers to hijack Ebay accounts. There has been no comment to verify if the potential to redirect within listings has been fixed.

The security hole has recently been infamously exploited by a Romanian hacker known as "Vladuz." The security hole is thought to be responsible for a recent upsurge in the number of hijacked Ebay accounts.

Ebay has been rapped for not being more forthcoming about security vulnerabilities. Many users have also complained about Ebay's "heavy-handed" tactics, such as suspending users who have asked questions about security. full story

To help keep the eBay community safe, enhance bidder privacy, and protect our members from fraudulent emails, only you and the seller of the item can view your User ID in bid history. Other members will see anonymous names.

eBay redirection ruse reloaded

18 month-old security flaw still remains unfixed

A redirection script error on eBay's site remains open to abuse 18 months after The Register first reported it. The flaw - actively exploited in phishing scams since February 2005 - creates a means to make fraudulent emails look more convincing. Shortly after publishing a report on the problem, eBay assured us that it had plugged the hole. Despite this the site remains open to abuse through the same back door, as an email from Reg reader Adrien this week reminds us. full story

Click on an eBay auction listing, and you could get an unwanted result: a fake eBay login page, created by scammers looking to pilfer your username and password. With about 181 million users worldwide, eBay is arguably the world's most popular online marketplace. As such, the San Jose, California, company, with its online payment unit PayPal, is among the biggest targets for online scammers -- including phishers. full story