full-disclosure - PAYPAL security, hundred or thausend of buyers under cc fraud

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue Oct 11 14:52:15 2005
From: toddtowles at brookshires.com (Todd Towles)
Subject: PAYPAL security,
	hundred or thausend of buyers under cc fraud

Very true. Then the banks are allowed to contact you and tell you if
your card was exposed, but they don't have to tell you. I called my bank
shortly after the CardSystems issue and they told me that they had a
list of the cards that were exposed and they were watching them.
Umm..sorry that isn't good enough for me. You know the cards that were
stolen and you are going to watch them? I know what I buy...would I not
be in a better position to judge that type of stuff.

Some banks, let their customers now and even reissued cards to
them...while other banks just sit in the list and didn't want to rock
the boat....at what cost? That I can get charged 24.99 for months and
never know about it.

Seems like this stuff needs to change... 

> -----Original Message-----
> From: full-disclosure-bounces@...ts.grok.org.uk 
> [mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf 
> Of Mary Landesman
> Sent: Tuesday, October 11, 2005 9:00 AM
> To: ad@...ss101.org; full-disclosure@...ts.grok.org.uk
> Subject: Re: [Full-disclosure] PAYPAL security,hundred or 
> thausend of buyers under cc fraud
> 
> I've spent less than 5 minutes looking through that thread 
> and already have found a number of posts stating their card 
> was not affiliated with PayPal.
> So I have to wonder how you jumped so quickly to that conclusion.
> 
> Remember CardSystems - 200,000 credit card accounts were 
> compromised and 40 million accounts exposed just months ago. 
> I think I would put my bet on something more obvious, like that.
> 
> Research is about more than collecting links that backup your 
> viewpoint.
> 
> -- Mary
> 
> ----- Original Message -----
> From: <ad@...ss101.org>
> To: <full-disclosure@...ts.grok.org.uk>
> Sent: Tuesday, October 11, 2005 9:23 AM
> Subject: [Full-disclosure] PAYPAL security,hundred or 
> thausend of buyers under cc fraud
> 
> 
> I will explain my small story to show you that using paypal 
> to buy on the
> web is risked.
> I have buy only 2 things this month, 1 game at 
> steampowered.com and 1GB DDR2
> at a respectable ebay store. That was the first time I were 
> using paypal to
> pay things on the net and so on it will be the last time..
> 
> Today I notice at my bank account a fraudulent debit of 
> 24.99$ coming from a
> "DIGITAL AGE 888", and looking on the web, happy to see that there is
> hundred maybe thausends of ppl in my case , fraudulent charge 
> of 24.99$ from
> a "digital age".
> 
> look there:
> 
> http://www.dslreports.com/forum/remark,14525502?
> hilite=digital+age
> 
> http://www.dslreports.com/forum/remark,14521837?
> hilite=digital+age
> 
> http://www.robertkbrown.com/2005/10/04/digital_age_fraud.html
> 
> after reading all this and comparing with my case, sure it 
> comes from paypal
> and the stored cc card.
> 
> So if you are under the fraud also like me, fill a complaint 
> to your bank
> and there http://www.ifccfbi.gov/index.asp
> 
> This was a first and last use of paypal for me, unbelievable ...
> 
> 
> 
> --------------------------------------------------------------
> --------------
> ----
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>