Feeds

Bot-wielding hackers crash eBay holiday giveaway

eBay cares not

Providing a secure and efficient Helpdesk

eBay users are howling in protest after discovering hackers are using automated scripts to win hundreds of steeply discounted auctions as part of a holiday season contest designed to draw visitors to the site.

Auctions for pricey items including a Green Life electric scooter and an Oscar de la Renta evening gown, which had been marked down to just $1, were scooped up even as the counter for their pages registered 0000 visitors. The Grinch stealing this year's Christmas booty were bot-armed hackers who were able to sniff out the promo pages before they went live to the public.

"This should have been advertised as a programming contest because those are the only people who can win," one eBay user complained to MSNBC's Red Tape Chronicles, which reported the story. "eBay can stop this if they want to by requiring a verification screen or something, they just don't care."

Perhaps. But that would require eBay to have an established set of contest rules, which it apparently doesn't.

An eBay spokesman first told MSNBC's Bob Sullivan the rules didn't prohibit the use of scripts to find items included in the "Holiday Doorbusters" promotion. Later, he changed that to say they might bar automated tools. Finally, the company issued a mealy-fingered email that said only that employees were "doing everything in our power to ensure that all eBay users have an equal opportunity to search for and win these hot holiday items."

So our advice to eBayers intent on winning this year is to hire a freelance programmer to scoop up the hot items before someone else gets there first. It may not be the most ethical thing you've ever done, but the deals are amazing. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
SMASH the Bash bug! Apple and Red Hat scramble for patch batches
'Applying multiple security updates is extremely difficult'
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
prev story

Whitepapers

A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.