Re:eBay port scans visitors' computers for remote access pro...
by mschuster91 on Monday May 25, 2020 @08:59AM
(#23300502)
GDPR allows "necessary" data processing for "legitimate interests". IANAL but I believe a non-damaging portscan to check for security issues to be allowed. Especially as eBay has the legitimate interest to ward off fraud - and customers have the legitimate interest to have their accounts protected.
[ Parent
| on HN ]
Re:eBay port scans visitors' computers for remote access pro...
by HenryBemis on Monday May 25, 2020 @11:22AM
(#23301978)
> non-damaging protscan
Tell that to every corporation on Earth, especially to Banks, that "port scanning your perimeter is an innocent thing". Tell that your employer as well and do tell us what's your job status afterwards.
(I am not downvoting the utterly silly grey comments - I want them to be visible to a) ;)
Re:eBay port scans visitors' computers for remote access pro...
by TehCorwiz on Monday May 25, 2020 @09:04AM
(#23300551)
Then they need to disclose that behavior. Because my firewall marks portscans as a malicious activity.
Re:eBay port scans visitors' computers for remote access pro...
by rocqua on Monday May 25, 2020 @09:19AM
(#23300712)
Since the portscan happens clientside on 127.0.0.1 I doubt your firewall will be able to notice the portscan.
Re:eBay port scans visitors' computers for remote access pro...
by mschuster91 on Monday May 25, 2020 @10:04AM
(#23301218)
That depends if you use IPv4 with NAT like almost everyone on a residential Internet uplink or IPv6 with a public routed address...
Re:eBay port scans visitors' computers for remote access pro...
by zaarn on Monday May 25, 2020 @10:20AM
(#23301384)
127.0.0.1 (aka localhost) isn't affected by your NAT setup. Your browser initiates this scan on the local loopback device, so the traffic will never even leave your computer (even on linux, it's somewhat difficult to get it to route 127.0.0.1 to another computer and it'll break a lot of applications in the process or make them insecure).
IPv6 with a public routed address still means there is a firewall, just like with NATv4. NATv4 just also has a NAT router with that firewall.