informa
Quick Hits

eBay To App Developers: Change Your Passwords

Security risk could allow bad guys to access eBay's Developers Program user accounts
eBay is warning members of its Developers Program to change their passwords on the developers' program site due to a newly discovered threat to their accounts.

"eBay has recently identified a means by which someone could gain access to eBay Developers Program account information," blogged Kumar Kandaswamy, manager of the eBay Developers Program.

Kandaswamy said the unauthorized access on the site won't let an attacker steal credit card, bank account information, or Social Security numbers, and that eBay had not seen any "unusual activity" with any of its developers' accounts.

It's not the first time attackers have tried to gain access to the eBay Developers Program, he said. "Occasionally, fraudsters attempt to gain unauthorized access to the eBay Developers Program," he blogged.

The Developer's Program allows application developers to use eBay's API to write tools for the online auction site. It wasn't clear whether eBay had discovered signs of malware or other breaches on the site. eBay had not responded to press inquiries as of this posting.

Kandaswamy said eBay is now "requiring" all developers to adopt eBay's "new, stricter passwords" on the developer site "out of an abundance of caution and to help ensure the security of the eBay Developers Program." He said developers don't need to change their passwords on the regular eBay site, however.

If a developer is worried that it has been the victim of fraud or its customers have, contact eBay at at this link.

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.

Recommended Reading: