eBay Going For More Security
I just got an interesting "alert" on my eBay account. Starting this summer, eBay is going to start a new security program which takes securing an account to the next level. Basically what they're going to do is require you to authenticate yourself if you're using a computer on eBay that hasn't already been authenticated.
Authentication is done two different ways (in addition to a regular password). You can answer an automated phone call, or talk to a Live support person (via web chat).
It will be interesting to see whether the authentication will be IP or cookie based. Even though cookies would be more secure (it would be on a per computer basis, rather than internet connection), I hope it's not. (My bank puts a cookie on an authenticated computer and as a web developer I'm constantly clearing cookies. I always have to authenticate the hard way - annoying.)
The thing I don't understand - why eBay? Why are they not going to this type of extreme with PayPal. There's got to be a a lot more stolen PayPal accounts than eBay accounts. Many people's PayPal accounts are tied directly to credit cards & bank accounts!
Is this a step backwards towards bridging highly sensitive web accounts with *real* life? As long as I'm on the phone with eBay, I may as well place my bid over the phone too - hey, that kinda reminds me of a 1997-style product catalog.
The alert I was sent is below:
Dear David Jeffries:
We would like to tell you about a new security initiative that will help keep your account secure. Later this summer, eBay will begin checking to ensure you are signing in from a computer you have successfully used previously. If you attempt to list an item from a different computer – for example, from a PC you are borrowing in a hotel or library – we will ask you to confirm your identity.
Confirming your identity is simple. When prompted, you can choose an automated call to one of the numbers you have registered with us. If this is not possible, we will provide you with alternative methods, such as confirmation through Live Chat, or an automated call to a new number. These alternate methods will require you to provide additional information, such as the correct answer to your secret question.
Please take a minute to update your contact information.
To help quickly confirm your identity, we recommend that you have a current phone number and a secret question and answer on file with eBay. If you have a cell phone, we strongly encourage you to add this to your registration details as a secondary phone number, so that you can confirm your identity while away from your home or business.
Sincerely,
eBay Trust and Safety Department
This sounds like YET MORE SURVEILLANCE on the part of ebay/Feds… People are FED UP with all their joint and separate snooping, and this latest b.s. will force even more people to abandon ebay and paypal. Already ebay is forcing everyone to use PayPal instead of checks or money orders, “ostensibly” to assist in meeting federal stipulations that they must report users’ activity (for tax purposes), but isn’t it interesting that eBay/PayPal *always* finds a way to PROFIT from whatever pressures are put on them from the “outside”??
There is no way in the world that folks will cowtow to this increased surveillance to the point of having to engage in TELEPHONE CALLS to verify that the machine they are using is OK for them to buy or sell on ebay!
This is downright absurd; watch for more and more buyers and sellers to bail from ebay and paypal!
And by the way, what sort of “increased security” does ebay plan to install on our privately owned computers in order to assist their increased surveillance??