P3D Ebay Security Flag

[Bob Wier <wier@xxxxxxxxxxxxxxxxx>]

I've recently been reminded (thanks Jay!) that there is a 
possible security problem with Ebay which has been known for
awhile ... see

http://www.because-we-can.com/ebayla/default.htm

Briefly, the problem is that it is (or at least was) possible for
someone to embed a Java/Javascript code in an ad which *could* send
password information (as used in bidding and listing ads) to 
someone *besides* ebay. 

It would seem right offhand that if one were to disable Java &
Javascript in their browser, then you would not have the problem.
However, it's also not clear that you could still bid (kind of
a drawback in an auction :-)

I thought this relevent due to the e-bay discussion right now.
I'm personally not terribly concerned about this, since
the liability issue for a given individual is small. Probably
the greatest risk is the use of your id/password in a bogus
ad which is designed as a vehicle to defraud other bidders. 
Naturally you'd not want to be perceived as the perp of such
a scheme.

THANKS

              Bob Wier
     mailto:wier@xxxxxxxxxxxxxxxxx
   9:36 PM Thursday, April 29, 1999
        Unix/Internet Administrator
   Rocky Mountain College, Billings MT.



------------------------------