News for hackers. Stuff that matters.
Re:eBay port scans visitors' computers for remote access pro... by zu03776 on Monday May 25, 2020 @10:05AM (#23301228)
Has anyone investigated how this protection works? That is, deliberately create an eBay account, log into eBay using a remote tool, and trigger the fraud detection? My curiosity is piqued, but I don't have an account to offer up.

I'm wondering if eBay displays a fraud warning, or pretends to allow the transaction to occur (shadow bidding?), or just hellbans the account being used.

For shill-bidding farms, the obvious counter is to move remote screen access to non-standard ports, or move to headless browser operation via other scripting methods.

Re:eBay port scans visitors' computers for remote access pro... by phire on Monday May 25, 2020 @10:33AM (#23301506)
It probably does nothing directly.

It will just feed the data-point into an anti-fraud/anti-spam system along with everything else.

And the anti-fraud/anti-spam system is probably a machine learning black box. It will learn if this data-point is actually correlated with naughty behaviour, and what other factors are usually correlated.