ebaY is HACKED! Take a Tour with a Whore! XSS Flaw

Please read this text accompaniment

Looking back nearly a year now, and on the verge of a massive Global Boycott of ebay & PayPal due to unfriendly and unreasonable wave of unfair policy changes, I am very curious to see what will happen next.
Also, the alleged 'capture of Vladuz' is starting to be questioned. I can guarantee viewers that sleazy entrapment techniques were used, and as we all know very well, with those methods, eventually they were bound to reel in a sucker. Time will tell...


!*UPDATE 06-13-07
I have captured more, uncensored live XSS flaws, and have them available to anyoine wishing to view them.

Further Google: "eBay's phishy old problem" to learn even more and see what the experts have to say about ebay and their security.

05-09-2007
The "hookers" attacked again en mass last night. I captured it on video screen recording. See my Cappnonymous Blog for screencaps tinyurl.com/2jjdaj

Pure Parody, with hacked and chopped sound, here on youtube

On the 18th day of April, 2007, ebaY was still again hacked, whereupon hundreds of the now infamous, ahem, "hooker" auctions were posted, in rapid succession, exposing the nonvalue and non-effectiveness of that new "Proactive Fraud Reduction" policy thingy. This is a parody/documentary of that event. Enhanced with spiffy Web 2.0 Flash and Glam!

This is the video version of a slideshow I made.
This is part of the ongoing Massive WorldWide Multi-User Hijackings that have been occurring each and every day since at least mid-February on ebaY!

I did edit these to make them viewable, but I had to take liberties because pixelating them out was still too risque

I have also written a couple blog posts about the pornography on ebaY.

This parodizes the so-called "proactive fraud reduction" policy, which STILL does NOT work.

I captured fraudulent, pornographic, hacked listings, from hijacked accounts, showing up on ebay motors in just 1 minute!(or less)

How long does it take a legit listing to show?

The ebay sellers / victims were mr.spinnerbait, and 1shirt52

The other blog article is entilted "Porn on ebaY ~ Should Consumers Be Offended?" also on my bravenet blog.

There are screen caps and shocking related news articles there, including one on MP3 podcast, from eweek, entitled "Navigating ebay's Shark Filled waters", wherein eWeek Senior Security Editor Lisa Vaas speaks with Genie Livingston about the horrors of ebay.

Cappnonymous Buds Blog.

Much of the porno on ebay has been hardcore. I understand thousands of folks from "AR15 DOT com" saw some too. Further, I understand it took days and days before the listings were removed in many cases.

There has even been porn in the toddler category, and all over the whole site. Go the the screencaps in my blog.

I guess the funny part is, is that ebay claims to be safe and trustworthy.

Yep, everything is just peachy at ebay.

BTW, I wonder whether the folks at the place you see in the watermark of the porn photo know that their photos have been used in hacked hijacked fraudulent ebaY motors listings?

I wonder whether those poor girls are being compensated? Lord knows they deserve it.

Recently, I also captured hacked hijacked listings with photos Carmen Electra in them, portrayed as a "whore", you can see a sample of that in my other video parody, "ebaY inc Vladuz Massive Hack Attack Cover-Up"

This was made with ZDSoft Screenrecorder 2.5, Windows Movie Maker.

Note: I am using firefox 2.003 browser, with adblock plus, noscript, super drag n go, Image Zoom 0.3, and slim search extensions, among others.

The free slideshow I recorded is hosted at imageshack.

This video is parody based, thus any sarcastic subjective profundities are purely intentional.

The contents of this video fall under fair rights use. The creator of this video has no commercial or financial motivations.
Further, materials used herein are integral to the parody element of the video, as I expose the insecurity & danger of even surfing ebay-Paypal displayed to ebay/ Paypal users and 'community' worldwide, at large, in parody.

There is and has an obvious claim to the transformative value.
This is an expressive work, it provides social benefit, by shedding light on an earlier work, and, in the process, creates a totally new one.

;^D

Category:

Comedy

Tags:

• ebay
• attack
• whore
• hookers
• cover-up
• xss
• redirect
• hacked
• hacking
• Vladuz
• Rob Chesnut
• Bill Cobb
• Meg Whitman
• breach
• safety
• fail

[animekoi]

lol i bet they hav blue waffles xD

[cappnonymous]

@animekoi

lmao!

Thanks for watching & commenting. :)

[cappnonymous]

Viewers here might like to be aware that the critical safety flaw which allows for ID stealing redirections to fake sign-in pages is still alive and well on ebay, some 3 1/2 years after the United States Computer Emergency Readiness Team issued warnings.

Search for XSS within my videos for a live, narrated demonstration from very recently, november 2009.

[cappnonymous]

Looks like yet ANOTHER PayPal Data Leak!

Go to stores board on ebay community forums, look for thread titled

"Anyone Else Get an Email from a former PayPal Employee?"

It appears as though a former employee has left PayPal with the database.

Just more PROOF! PayPal is NOT safe, NEVER has been. They operate with total lack of any real concern for your safety.

Boycott ebay & PayPal!

[cappnonymous]

Continuing BICLighter7 This is a redirect to a FAKE sign in page. This was never intended to be bid on. When the hackers get the code right u are redirected without even noticing to a BOGUS sign in page.

I have many examples documented wherein the code worked perfectly, hosted at site which allows the content since very often these are chocked full O hardcore porn.

The internet is full of such reports too BTW. Speaking of trolling, how many Cappnonymous vids have u left same lame-ass comment on?

[cappnonymous]

Hello BICLighter7.

True, this may have comedy elements, but at the core is PROOF that ebay is HACKED! Notice the times shown in the listings? The hackers were able to get their XSS redirect listings right past ebay's supposed 'fraud filters' proving that the so-called Proactive Fraud Reduction Policy is nothing more than lip service. This type of FAKE listing is an ID stealing ploy. Ebay allows dangerous scripting in their UGC. They refuse to disallow it. Notice Rob Chesnut left ebay in SHAME?

[psycofloyd]

Well put. I stopped using ebay about a year ago or so. Best decision I could have made now. Good vids :)

[randy204]

You are right on with what you say and your putting those assholes in the light...your a straight up guy! good job! i enjoyed the video! keep it up! all the rest of you assholes need to go to hell and if you dont like the video simply say i didnt enjoy this video, but thanks for posting! why cant you say that you dinks? if you dont say that then dont say anything at all!!

[GulfTangoSierra00000]

Only 1 thing I gotta say.

GO VLADUZ! GO VLADUZ! GO!

[frtuhgr]

i under stand about 80% of this but were els am i going to find stuff that is now out of stock because ebay has almost everything.but wat if u use a gift card instead of a credit card and im not dumb i get as and bs i just dont understand computer stuff

[thinggamer]

Is this still happenening? Ebay and paypal are the only way I can make money without getting a job =/......

[imnamedhi]

what is the frist song called. From test drive 5