eBay Privacy Policy Update Effective 12-23

[valueaddedresource]

Just FYI, eBay has a privacy policy update going into effect 12-23

New Policy - https://www.ebay.com/help/policies/member-behaviour-policies/user-privacy-notice-privacy-policy?id=4...

Old Policy - https://www.ebay.com/help/policies/member-behaviour-policies/user-privacy-notice-privacy-policy?id=4... 

I'm still combing through it but mostly so far it looks like removing language about PayPal for payments and clarifying some differences between UK and EU.

Interesting to see the addition of disclosure that they may use port scanning tech - that raised some eyebrows when it was first discovered last year.

[zamo-zuan]

---

@valueaddedresource wrote:

Just FYI, eBay has a privacy policy update going into effect 12-23

New Policy - https://www.ebay.com/help/policies/member-behaviour-policies/user-privacy-notice-privacy-policy?id=4...

Old Policy - https://www.ebay.com/help/policies/member-behaviour-policies/user-privacy-notice-privacy-policy?id=4... 

I'm still combing through it but mostly so far it looks like removing language about PayPal for payments and clarifying some differences between UK and EU.

Interesting to see the addition of disclosure that they may use port scanning tech - that raised some eyebrows when it was first discovered last year.

---

Port scanning huh? 

I can't think of any legitimate reason they might want to use this. Maybe trying to detect if someone is connected through a VPN? But even if that's the case, there's legitimate reasons people may be using and/or need a VPN. 

[valueaddedresource]

---

---

@zamo-zuan  there was a lot of concern about it last year when it was first discovered, that's for sure.

https://www.forbes.com/sites/daveywinder/2020/05/25/did-you-know-ebay-is-probing-your-computer-heres...

My take on it at the time was it appeared they were specifically scanning for open remote ports - guessing they had reason to believe some of the compromised account fraud on the site was coming from computers that had remote sessions accessing their browsers and using stored log in credentials to gain access.