A redirection script error on eBay's site remains open to abuse 18 months after The Register first reported it.
The flaw - actively exploited in phishing scams since February 2005 - creates a means to make fraudulent emails look more convincing.
Shortly after publishing a report on the problem, eBay assured us that it had plugged the hole. Despite this the site remains open to abuse through the same back door, as an email from Reg reader Adrien this week reminds us.
He notes that URLs such as this example are being bounced off eBay site onto other domains. In this case the surfer is redirected to Google, but sending people to less savory destinations is equally possible.
"I'm holding out for the second anniversary of the backdoor. I might bake a birthday cake and send it to them. A nice phish cake," Adrian said.
We are yet to hear back from the online auction house on whether it has any plans to address the problem. ®
Sooner or later this sleazy online auction giant will be held accountable for what is, all things considered, quite obviously criminal negligence.
__________________
CAPP Consumers Against PayPal Policies - Exposing the sleazery of sleazebay and painpal
Yaaah, perhaps zee boring girly-maan needs to get his gonads from Meggy's purse. He is always running from zee real qwvestions like a scared little haamster.
boring person, I am Hans [grabbing crotch] undt this is Franz, undt vee are here to shut_you_up, girly-man.
Hear me now, undt believe me later - but don't think about it too much, because, if you try to think, it might cause you brain flatulance... it doesn't matter how much you pomp up those mouth/typing muscles, your flabby counterpoints (or lack thereof) will never outweigh the facts.
-- Edited by anonymous at 03:11, 2006-11-17
__________________
CAPP Consumers Against PayPal Policies - Exposing the sleazery of sleazebay and painpal