35,000 PayPal users Breached

Soldato
Joined
1 Nov 2004
Posts
5,380

PayPal did not inform law enforcement about the security snafu, according to the notification.

The financial goliath did not address The Register's questions on, among other things, why it didn't involve the cops and what are some of the enhanced security measures it has implemented since discovering the attack. Instead a spinner told us:

:eek: :confused:
 
Last edited:
In the UK there's an identity check app from the government. I know I had to use it recently. It could solve their issues without making a pool of photo IDs that is even more attractive to hackers.
 
Paypals 2FA has never worked properly, nor does it remember your device for 30 days (I think the devs made a mistake and set it to 30 seconds rather than 30 days). Noobs! :cry:
 
In the UK there's an identity check app from the government. I know I had to use it recently. It could solve their issues without making a pool of photo IDs that is even more attractive to hackers.

I'll be surprised if we don't do full scale ID checks in the future for all the mainstream sites. I have an app called Yoti which is my digital ID if I ever need it.
 
Lol paypal.

I'm genuinely amazed that they're still going, they've been surpassed by other companies in every conceivable aspect and their own house is a dumpster fire.
 
don't most people use email address as their paypal id, which is easy to steal elsewhere ? and they then tried those with previously pwned passwords

as suggested I too, use their 2FA with authenticator, but would use a sms to phone if we had good reception,
banks are still using 2FA via SMS, plus you'd put a sim passwords on your phone to prevent sim swap fraud.
 
Back
Top Bottom