露天拍賣被投訴 帳號易被盜用
網友投訴露天拍賣網站安全機制出現漏洞,詐騙集團可輕易入侵盜用帳號,即使更改密碼也沒有用,圖為帳號被盜用後的惡搞情形。(讀者提供)
〔記者邱紹雯、王珮華/台北報導〕國內第二大拍賣網站露天拍賣宣布安全性破功?網友投訴,樂天會員帳號莫名遭盜用(見上圖,讀者提供),即使停權變更密碼,盜用者只要有帳號、身分證字號仍可輕易入侵,個人資料果真全「露天」,毫無保障可言,痛批業者:「想收錢,先把安全性搞定再說吧!」
被冒名訂購數百副Nu Bra
網友「阿村」指稱,已連續一週拍賣帳號遭盜用者惡搞,先是莫名其妙訂購了八百三十五副Nu Bra,甚至以他名義張貼低於市價的小家電商品資訊,吸引買家上鉤,幾位無辜買家匯了錢,卻收不到貨,懷疑業者縱容詐騙集團騙取個資。
「阿村」質疑,樂天拍賣網站的安全性設計有漏洞,凡是註冊登錄會員,帳號即無法更動與刪除,「想不用都不行」。當他發現帳號被盜用,僅能暫時凍結帳號,更改密碼,但實際上仍無法遏止盜用。
他測試變更密碼登入機制,只要擁有對方的帳號、身分證字號就可輕易進入變更,發證日期隨便亂填也無所謂,賣家以為變更密碼就已經安全,卻仍難逃盜用者掌控。
更令「阿村」不滿的是,號稱國內第二大的拍賣網站,卻連一支專線的客服電話都沒有,受害者只能透過電子郵件反映,且處理速度緩慢,造成網路買家與賣家諸多困擾,令人憤怒。
露天客服專線下月擴編
露天市集坦言,目前的確無客服專線,已經積極籌備擴編客服團隊,屆時就會有客服專線,預計十一月間,客服團隊就會擴大服務能量,屆時處理速度將會加快。
2009年10月30日 星期五
2009年10月28日 星期三
2009.10.28 F5 GTM LED indicator behavior
SOL4263: New front panel LED indicator behavior in BIG-IP version 9.x
這裡有描述四種LED燈號狀態的說明, 也包含了platform的對應代號.
這裡有描述四種LED燈號狀態的說明, 也包含了platform的對應代號.
2009年10月27日 星期二
2009.10.27 What SMTP response codes does the IronPort appliance support?
What SMTP response codes does the IronPort appliance support?
The IronPort appliance is fully-compliant with the original SMTP (Simple Mail Transfer Protocol) specification of RFC 821. The complete list of message response codes are listed in RFC 821.
The 400 series of codes indicate non-fatal errors or responses in the SMTP conversation. Such errors are often referred to as soft-bounces, as unless otherwise instructed, the transmitting mail server will re-attempt delivery to the intended receiver at a later time. Soft-bounces can be caused by a variety of things ranging from a mail account exceeding its quota to SMTP hosts policy limits imposed upon a particular sender.
The 500 series of codes are also error codes. Unlike the soft-bounces of the 400 series however, the 500 denote a complete failure on the part of the receiving server to accept a message for delivery. These failures, referred to as hard-bounces, are typically caused by such issues as malformed or unknown mail-to addresses, a failed reverse DNS check, or other receiver host policy limits.
It is important to note that depending upon the policy set for the transmitting mail server, a soft-bounce may eventually become a hard-bounce
Here is a list of the most common SMTP response codes:
211 System status, or system help reply
214 Help messageInformation on how to use the receiver or the meaning of aparticular non-standard command; this reply is useful onlyto the human user
220 Service ready
221 Service closing transmission channel
250 Requested mail action okay, completed
251 User not local; will forward to
354 Start mail input; end with.
421 Service not available, closing transmission channel This may be a reply to any command if the service knows it must shut down
450 Requested mail action not taken: mailbox unavailable E.g., mailbox busy
451 Requested action aborted: error in processing
452 Requested action not taken: insufficient system storage
453 Too Many Recipients
500 Syntax error, command unrecognized This may include errors such as command line too long
501 Syntax error in parameters or arguments
502 Command not implemented
503 Bad sequence of commands
504 Command parameter not implemented
550 Requested action not taken: mailbox unavailable E.g., mailbox not found, no access
551 User not local; please try
552 Requested mail action aborted: exceeded storage allocation
553 Requested action not taken: mailbox name not allowed E.g., mailbox syntax incorrect
554 Transaction failed
The IronPort appliance is fully-compliant with the original SMTP (Simple Mail Transfer Protocol) specification of RFC 821. The complete list of message response codes are listed in RFC 821.
The 400 series of codes indicate non-fatal errors or responses in the SMTP conversation. Such errors are often referred to as soft-bounces, as unless otherwise instructed, the transmitting mail server will re-attempt delivery to the intended receiver at a later time. Soft-bounces can be caused by a variety of things ranging from a mail account exceeding its quota to SMTP hosts policy limits imposed upon a particular sender.
The 500 series of codes are also error codes. Unlike the soft-bounces of the 400 series however, the 500 denote a complete failure on the part of the receiving server to accept a message for delivery. These failures, referred to as hard-bounces, are typically caused by such issues as malformed or unknown mail-to addresses, a failed reverse DNS check, or other receiver host policy limits.
It is important to note that depending upon the policy set for the transmitting mail server, a soft-bounce may eventually become a hard-bounce
Here is a list of the most common SMTP response codes:
211 System status, or system help reply
214 Help messageInformation on how to use the receiver or the meaning of aparticular non-standard command; this reply is useful onlyto the human user
220 Service ready
221 Service closing transmission channel
250 Requested mail action okay, completed
251 User not local; will forward to
354 Start mail input; end with
421 Service not available, closing transmission channel This may be a reply to any command if the service knows it must shut down
450 Requested mail action not taken: mailbox unavailable E.g., mailbox busy
451 Requested action aborted: error in processing
452 Requested action not taken: insufficient system storage
453 Too Many Recipients
500 Syntax error, command unrecognized This may include errors such as command line too long
501 Syntax error in parameters or arguments
502 Command not implemented
503 Bad sequence of commands
504 Command parameter not implemented
550 Requested action not taken: mailbox unavailable E.g., mailbox not found, no access
551 User not local; please try
552 Requested mail action aborted: exceeded storage allocation
553 Requested action not taken: mailbox name not allowed E.g., mailbox syntax incorrect
554 Transaction failed
2009.10.27 Cisco 3845 AC Power Supply安裝
2009.10.26 CCNP Recertification
CCNP期限即將於2009.12.10到期.
Cisco Certification Tracking System寄信來說我的期限是在2009.12.10, 但是我收到的CCNP隨身的認證卡上的期限是2010.4.3. 經過開case詢問後, 證明是CTS講的才是對的.
經過將近三個禮拜的晚上自修後, 今日下午四點到TI 8複試.
想不到現在考試還要拍照, 手機,錢包,紙張都代為保管.
考完後的成績單上會印上照片.
後來考上了, 減輕了我一項壓力
Cisco Certification Tracking System寄信來說我的期限是在2009.12.10, 但是我收到的CCNP隨身的認證卡上的期限是2010.4.3. 經過開case詢問後, 證明是CTS講的才是對的.
經過將近三個禮拜的晚上自修後, 今日下午四點到TI 8複試.
想不到現在考試還要拍照, 手機,錢包,紙張都代為保管.
考完後的成績單上會印上照片.
後來考上了, 減輕了我一項壓力
2009年10月24日 星期六
2009.10.24 L客戶某一問題的解決方法
2009.10.24 今早起床後, 還是很想睡覺.
思索了一個問題, 用一種比較不累的方式是在Core(4000, 6500)的各vlan上,將非本地vlan出來的traffic都過濾掉. 至少這樣能過濾大半ip spoofing的攻擊.
而要解決arp spoofing and mac address flooding攻擊, 那就很累了, 除了在access layer要部屬port security功能, 還要加上ip dhcp snooping
思索了一個問題, 用一種比較不累的方式是在Core(4000, 6500)的各vlan上,將非本地vlan出來的traffic都過濾掉. 至少這樣能過濾大半ip spoofing的攻擊.
而要解決arp spoofing and mac address flooding攻擊, 那就很累了, 除了在access layer要部屬port security功能, 還要加上ip dhcp snooping
2009年10月23日 星期五
2009.10.23 L客戶再度出問題
10/22 晚上疲憊的回家. 與尚恩聊天,玩! 約十一點睡覺
10/23 凌晨兩點多被叫醒.
內湖連不進去,中和可以
狀況與昨天不一樣, 內網看不出有異常. 反而是外線部分設備掛點!
02:00~04:00
上午起床後,頭痛,體力不佳, 打電話請假, 結果白天睡不著, 一直到午餐吃完後,幫女王訂了
IBM ThinkPad Z60t的電池及鍋子後, 才能睡覺.
睡到四點多, 還是很累, 今晚決定不打羽球. K日文
約十一點半睡
10/23 凌晨兩點多被叫醒.
內湖連不進去,中和可以
狀況與昨天不一樣, 內網看不出有異常. 反而是外線部分設備掛點!
02:00~04:00
上午起床後,頭痛,體力不佳, 打電話請假, 結果白天睡不著, 一直到午餐吃完後,幫女王訂了
IBM ThinkPad Z60t的電池及鍋子後, 才能睡覺.
睡到四點多, 還是很累, 今晚決定不打羽球. K日文
約十一點半睡
2009年10月22日 星期四
2009年10月21日 星期三
訂閱:
文章 (Atom)



