{"id":353439,"date":"2020-05-25T14:29:12","date_gmt":"2020-05-25T12:29:12","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=353439"},"modified":"2020-05-25T16:55:43","modified_gmt":"2020-05-25T14:55:43","slug":"ebay-port-scans-windows-pcs-that-visit-its-website","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/353439-ebay-port-scans-windows-pcs-that-visit-its-website.html","title":{"rendered":"eBay port scans Windows PCs that visit its website"},"content":{"rendered":"<p>The eBay website port scans the computers of people who visit the online classifieds and auctioning service from a Windows PC, according to several reports.<\/p>\n<p>Bleeping Computer <strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/ebay-port-scans-visitors-computers-for-remote-access-programs\/\" target=\"_blank\" rel=\"noopener noreferrer\">reported<\/a><\/strong> that the port scan appears to be trying to detect whether the visitor is running remote access or remote support tools.<\/p>\n<p>Specifically, JavaScript in a file called <code>check.js<\/code> is scanning for open ports associated with the following applications: VNC, Remote Desktop Protocol, Aeroadmin, Ammyy Admin, TeamViewer, Anyplace Control, and AnyDesk.<\/p>\n<p>These tools allow a computer to be remotely controlled over the Internet. While such tools are not exclusive to Windows, the eBay site only appears to perform the port scan on devices that it identifies as Windows PCs.<\/p>\n<p>MyBroadband was able to replicate the results of Bleeping Computer&#8217;s testing and found that the eBay site uses the <strong><a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/WebSockets_API\" target=\"_blank\" rel=\"noopener noreferrer\">WebSocket API<\/a><\/strong> to scan for open ports.<\/p>\n<p>A screenshot of Firefox&#8217;s development tools showing the port scanning in progress is included below.<\/p>\n<p>Bleeping Computer echoed speculation from other commentators that eBay is most likely port scanning to detect potentially compromised computers which are being used to make fraudulent purchases on the platform.<\/p>\n<p>&#8220;Our customers&#8217; privacy and data remains a top priority. We are committed to creating an experience on our sites and services that is safe, secure, and trustworthy,&#8221; eBay told MyBroadband when asked for comment on this story.<\/p>\n<div id=\"attachment_353463\" style=\"width: 650px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2020\/05\/Ebay-browser-portscan.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-353463\" class=\"wp-image-353463 size-large\" src=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2020\/05\/Ebay-browser-portscan-e1590411425533-640x376.png\" alt=\"\" width=\"640\" height=\"376\" srcset=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2020\/05\/Ebay-browser-portscan-e1590411425533-640x376.png 640w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2020\/05\/Ebay-browser-portscan-e1590411425533-600x352.png 600w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2020\/05\/Ebay-browser-portscan-e1590411425533-768x451.png 768w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2020\/05\/Ebay-browser-portscan-e1590411425533-1536x902.png 1536w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2020\/05\/Ebay-browser-portscan-e1590411425533-1200x704.png 1200w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2020\/05\/Ebay-browser-portscan-e1590411425533.png 1920w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/a><p id=\"caption-attachment-353463\" class=\"wp-caption-text\">Click to enlarge<\/p><\/div>\n<h3 class=\"my-4\">No port scanning on major South African websites<\/h3>\n<p>MyBroadband also visited several major local online classifieds and ecommerce websites to test whether they port scan their users.<\/p>\n<p>Gumtree, which was <strong><a href=\"https:\/\/www.theguardian.com\/media\/2005\/may\/19\/business.newmedia\" target=\"_blank\" rel=\"noopener noreferrer\">acquired by eBay<\/a><\/strong> in 2005, did not port scan our Windows PC when tested. Neither did Bidorbuy, Junk Mail, Takealot, Wantitall, Raru, Loot, Wootware, or Price Check.<\/p>\n<p>None of the website of South Africa&#8217;s major banks did it either, nor did the websites of major telecommunications companies.<\/p>\n<p>A full list of the websites we tested is included below:<\/p>\n<h3 class=\"my-4\">Confirmed<\/h3>\n<ul>\n<li>ebay.com<\/li>\n<\/ul>\n<h3 class=\"my-4\">No port scan<\/h3>\n<ul>\n<li>gumtree.co.za<\/li>\n<li>bidorbuy.co.za<\/li>\n<li>junkmail.co.za<\/li>\n<li>takealot.co.za<\/li>\n<li>wantitall.co.za<\/li>\n<li>raru.co.za<\/li>\n<li>loot.co.za<\/li>\n<li>wootware.co.za<\/li>\n<li>pricecheck.co.za<\/li>\n<li>johannesburg.craigslist.org<\/li>\n<li>yuppiechef.co.za<\/li>\n<li>ormsdirect.co.za<\/li>\n<li>zando.co.za<\/li>\n<li>mybroadband.co.za<\/li>\n<li>businesstech.co.za<\/li>\n<li>news24.com<\/li>\n<li>businessinsider.co.za<\/li>\n<li>fin24.co.za<\/li>\n<li>iol.co.za<\/li>\n<li>timeslive.co.za<\/li>\n<li>soccerladuma.co.za<\/li>\n<li>dailymaverick.co.za<\/li>\n<li>thesouthafrican.com<\/li>\n<li>msn.co.za<\/li>\n<li>citizen.co.za<\/li>\n<li>ewn.co.za<\/li>\n<li>alexa.com<\/li>\n<li>amazon.com<\/li>\n<li>zoom.us<\/li>\n<li>myshopify.com<\/li>\n<li>shopify.com<\/li>\n<li>youtube.com<\/li>\n<li>ourworldindata.org<\/li>\n<li>reddit.com<\/li>\n<li>fnb.co.za<\/li>\n<li>absa.co.za<\/li>\n<li>standardbank.co.za<\/li>\n<li>nedbank.co.za<\/li>\n<li>capitecbank.co.za<\/li>\n<li>discovery.co.za<\/li>\n<li>rain.co.za<\/li>\n<li>vodacom.co.za<\/li>\n<li>mtn.co.za<\/li>\n<li>telkom.co.za<\/li>\n<li>cellc.co.za<\/li>\n<li>www.cipc.co.za<\/li>\n<li>www.up.ac.za<\/li>\n<li>uj.ac.za<\/li>\n<li>www.nwu.ac.za<\/li>\n<\/ul>\n<h3 class=\"my-4\">Now read: <a href=\"https:\/\/mybroadband.co.za\/news\/business\/353247-naspers-in-bid-for-ebay-classifieds-business.html\">Naspers in bid for eBay classifieds business<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"<p>The eBay website port scans the computers of people who visit the online classifieds and auctioning service from a Windows PC, according to several reports.<\/p>\n","protected":false},"author":15,"featured_media":233663,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[3720,4694,32378,64819],"class_list":["post-353439","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-ebay","tag-gumtree","tag-javascript","tag-websocket-api"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/353439"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=353439"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/353439\/revisions"}],"predecessor-version":[{"id":353459,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/353439\/revisions\/353459"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/233663"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=353439"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=353439"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=353439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}