Author Topic: "You have authorised the following third party applications " ..... What?!!!!  (Read 10642 times)

*Brum6y*

  • Knights of the RT
  • Knight of the RT
  • *****
  • Posts: 20210
Did I miss the announcement?



This is on the 'Site Preferences' page.

[attachment deleted by admin]

Centuries

  • Knight of the RT
  • *****
  • Posts: 5907
Giving permission for money to be moved from a paypal/bank account?

I have no idea.
“I can't explain myself, I'm afraid, because I'm not myself, you see”  Lewis Carroll

*wheels*

  • Knights of the RT
  • Knight of the RT
  • *****
  • Posts: 8000
 :lol: :lol:  Brums, whenever eBay links to another application it always comes up with a warning screen and you need to click Yes or I agree or something.

Here's some on our lists:

eBay , Inc.
eBay Asynchronous Bulk Relist
eBay Selling Manager
NEOPOST ID - Click and Send
Paymate - Paymate Express Payments
Ebay    
BEAR Application
Omniture    
eBay Australia - eBay.com.au Wishlist
eBay Motors - Classifieds Lister

tellomon

  • Knight of the RT
  • *****
  • Posts: 53034
  • You don't get everything you want at Tello's.
    • facebook
Gotta love this scam:

Flag this message
TERMINATION OF YOUR ACCOUNT AVOID CLOSURE
Monday, November 29, 2010 8:45 AM
From:
"Yahoomail Customer Care" <9951101@jgps.tpc.edu.tw>

To:
undisclosed-recipients

Dear Account User
VERIFY YOUR YAHOO MAIL ACCOUNT NOW TO AVIOD IT CLOSED


This Email is from YAHOOMAIL Customer Care and we are sending it to very
EMAIL YAHOO User Accounts Owner for safety. we are having congestions due to
the anonymous registration of YAHOO accounts so we are shutting down some of
the accounts and your account was among those to be deleted. We are sending
this email to you so that you can verify and let us know if you still want to
use this account. If you are still interested please confirm your account by
filling the space below..Your User name, password, date of birth and your
country information would be needed to verify your account.

Due to the congestion in all YAHOO users and removal of all unused YAHOO
Accounts, We would be shutting down all unused Accounts, You will have to
confirm your E-mail by filling out your Login Information below after
clicking the reply button, or your account will be suspended within 24 hours
for security reasons.


* Username:...........................
* Password: ..........................
* Date of Birth: .....................
* Country Or Territory: ..............


After following the instructions in the sheet, your account will not be
interrupted and will continue as normal. Thanks for your attention to this
request. We apologize for any inconveniences.

Warning!!! Account owner that refuses to update his/her account after two
weeks of receiving this warning will lose his or her account permanently.
Sincerely.
The YAHOO Webmail
"The B@zturd Love Child of Comix & a News Organization"

*Brum6y*

  • Knights of the RT
  • Knight of the RT
  • *****
  • Posts: 20210
:lol: :lol:  Brums, whenever eBay links to another application it always comes up with a warning screen and you need to click Yes or I agree or something.

Here's some on our lists:

eBay , Inc.
eBay Asynchronous Bulk Relist
eBay Selling Manager
NEOPOST ID - Click and Send
Paymate - Paymate Express Payments
Ebay    
BEAR Application
Omniture    
eBay Australia - eBay.com.au Wishlist
eBay Motors - Classifieds Lister


Thanks Wheels - I could not find anything useful with the 'help' search.  (Makes note: lower your expectations, Brum6y)


The thing that worries me to the extreme is that these 'third-party authorisations' do not seem to have any defined bounds.  It reads to me that if you give permission so that one specific task can be performed, then you have given permission for any other actions the third-party might later decide to take on your behalf.

It's like allowing a person in distress to use your bathroom, then having them help themselves to your pantry, make a cuppa, prune your roses and use hubby's workshop ... and they can legally support those actions since they can show you gave them 'approval'.


If there is one organisation that I would never willingly give carte blanche approval to act on my behalf, it's eBay Inc.

I am guarded about giving them specific authorities - but the way this 'third-party authorisations' setup reads, there is nothing specific about it.


I DO NOT LIKE IT ONE IOTA.

low-enghooi

  • Knight of the RT
  • *****
  • Posts: 2474
Err. Those ebay approved "third party application" works within the boundary of ebay API. That is the only public interface for external software application.

Yes if ebay accidentally introduce something bad in their API set or the developer discover some undocumented trick, end users might be at risk.

*Brum6y*

  • Knights of the RT
  • Knight of the RT
  • *****
  • Posts: 20210
Low, that may be a technical constraint - but it does not preclude eBay, for example, having their OWN software accessing things for their own purposes.

My concern is in regards to the legal authority 'granted'.


Your point about the API possibly having weaknesses that could be exploited is a genuine concern - but also is the fact that eBay could alter the API facilities, changing what is accessible and also possibly including further weaknesses.  With the way the authority reads to me, there would be no legal impediment for eBay to give any such 'third-party' access via other means.  Yes, there are other issues - such as security for eBay's systems, etc. but I am not interested in any of that, so much as these 'authorisations'


Where, though, are the details of the specific actions that any such 'third-party authorisations' allow?

*Yibida*

  • Action Group
  • Knight of the RT
  • *****
  • Posts: 17998


Brums would you expect an outlaw to explain to you their internal agenda's ?..... same same....