geekhack

geekhack Marketplace => Great Finds => Topic started by: microsoft windows on Tue, 07 July 2009, 07:55:08

Title: IBM Model M Space Saver--$19.99
Post by: microsoft windows on Tue, 07 July 2009, 07:55:08
I was browsing the net when I came across something you guys might be interested in. It's one of those IBM Model M Space Saver keyboards.
http://cgi.ebay.com/Vintage-IBM-Space-Saving-Keyboard-Model-M_W0QQitemZ270421183386QQcmdZViewItemQQptZLH_DefaultDomain_0?hash=item3ef65bcb9a&_trksid=p3286.c0.m14&_trkparms=65%3A12%7C66%3A2%7C39%3A1%7C72%3A1234%7C293%3A1%7C294%3A50
Title: IBM Model M Space Saver--$19.99
Post by: bigpook on Tue, 07 July 2009, 09:26:42
Looks ok. Its a blue label, maybe a '92. Don't see a cable though.
Title: IBM Model M Space Saver--$19.99
Post by: bigpook on Tue, 07 July 2009, 10:18:35
But how would you know for sure? Your right about the label pic, there is no cable shown either.
It would suck to get scammed like that. Speaking of getting scammed; someone hacked my paypal account and helped themselves to 490 dollars. Paypal caught it in time and is investigating. When I asked Paypal how this could have happened they told me not to save my login/password in the browser.
But you can't save your password in the browser. It has to be entered each time you visit the site.
I run linux so am at a loss as to how this happened. I went neurotic and changed ALL of my passwords just to be sure on all accounts that deal with money.
If someone can enlighten me as to how this could happen please let me know.
Title: IBM Model M Space Saver--$19.99
Post by: lal on Tue, 07 July 2009, 10:50:24
Quote from: bigpook;101549
Speaking of getting scammed; someone hacked my paypal account and helped themselves to 490 dollars. Paypal caught it in time and is investigating. When I asked Paypal how this could have happened they told me not to save my login/password in the browser.

As long as nobody else has access to your profile data this is BS.

Quote
If someone can enlighten me as to how this could happen please let me know.

Depending on your password they might have guessed or cracked it, or they exploited some PayPal service to get your pw, or hacked directly into PayPal w/o needing your pw.  I would not believe one word from PayPal.  If you used the same or a similar password somewhere else, everything from above applies to that service too.

It is theoretically possible that a trojan on your system sniffed the pw, but highly unlikely because you're running linux.  Would be something completely new that has never been seen in the wild until today.
Title: IBM Model M Space Saver--$19.99
Post by: javifast on Tue, 07 July 2009, 11:17:34
I think is a fraud. Is the same keyboard I won 30 days ago...and I needed Paypal to refund the money.....and I saw it finish 3 days ago sold again.....and again in ebay???

http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&ssPageName=STRK:MEWAX:IT&item=250456549110

http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&ssPageName=STRK:MEWAX:IT&item=250456552225
Title: IBM Model M Space Saver--$19.99
Post by: talis on Tue, 07 July 2009, 11:51:43
Quote from: javifast;101566
I think is a fraud. Is the same keyboard I won 30 days ago...and I needed Paypal to refund the money.....and I saw it finish 3 days ago sold again.....and again in ebay???

http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&ssPageName=STRK:MEWAX:IT&item=250456549110

http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&ssPageName=STRK:MEWAX:IT&item=250456552225


His responses to negative feedback are great.
Title: IBM Model M Space Saver--$19.99
Post by: rdjack21 on Tue, 07 July 2009, 12:01:10
LOL I would really like to see the one EBay removed. I bet it was a really good one...
Title: IBM Model M Space Saver--$19.99
Post by: pfink on Tue, 07 July 2009, 12:06:11
Quote from: javifast;101566
I think is a fraud. Is the same keyboard I won 30 days ago...and I needed Paypal to refund the money.....and I saw it finish 3 days ago sold again.....and again in ebay???

http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&ssPageName=STRK:MEWAX:IT&item=250456549110


Ouch. I won this auction for $51.00. How long did you wait before reporting to eBay/PayPal?

Also, what's the process for reporting something like this? I've never gotten scammed on eBay before.
Title: IBM Model M Space Saver--$19.99
Post by: itlnstln on Tue, 07 July 2009, 12:10:27
No kidding.  Those responses only validate the original complaints.  I like how he called people b*tches and a*sholes on the feedback, too.  Nothing like name-calling to drum up business.
Title: IBM Model M Space Saver--$19.99
Post by: talis on Tue, 07 July 2009, 12:23:03
Quote from: pfink;101571
Ouch. I won this auction for $51.00. How long did you wait before reporting to eBay/PayPal?

Also, what's the process for reporting something like this? I've never gotten scammed on eBay before.

Woops, clearly the same picture.

The auction closed on the 4th?  I think you probably need to give it a week or so before ebay or paypal will do anything.  It may be worth starting an investigation with e-bay, as he's clearly re-listing the same item multiple times.

https://www.paypal.com/cgi-bin/webscr?cmd=xpt/Help/general/TopQuestion4-outside

http://crs.ebay.com/aw-cgi/ebayisapi.dll?crsstartpage
Title: IBM Model M Space Saver--$19.99
Post by: microsoft windows on Tue, 07 July 2009, 12:55:06
I never saw the one before it so it might be a good deal. But, you can always get a clicky keyboard with a number pad for less. And, a few days ago, there were two IBM's with trackballs (one buckling spring one) and the buckling spring one ended at just $11. But that's very rare.
Title: IBM Model M Space Saver--$19.99
Post by: talis on Tue, 07 July 2009, 13:45:55
Quote from: ripster;101594
Bummer.  Lessee - it looks like that file right there under that folder there with the name ..... Just kidding.

I'd blame Paypal first - probably a leak in their system.  My wife's info was on a laptop that a hospital employee had stolen out of the car.  Luckily, the thief was too stupid to figure it out.  State law got changed as a result of that one.

Since I already had plenty of credit cards I ended up LOCKING all credit reports at Experian, Equifax and Transunion.  $10 to each and paperwork but worth it to me.

Hope some of the Linux folks can help you more.

One of the newer ways people are gaining access to accounts is through weak password reset mechanisms.  It's possible to find all the information you need to reset passwords on a lot of peoples public facing profiles (facebook, linkedin, myspace, etc), especially when its things like addresses, birthdays, mothers names, pets, favorite books, etc.

I think this is usually directed more at e-mail account passwords, but it may apply in other cases as well.  I would assume the mechanism paypal has in place is a lot better, and requires knowlege and access to both the paypal account and email address.
Title: IBM Model M Space Saver--$19.99
Post by: lowpoly on Tue, 07 July 2009, 15:52:17
I remember the last time I opened a Paypal account it was nasty to get around the password recovery questions.

Must not use correct answers. Simple words are bad as well as they can be cracked by dictionary or brute force attacks.
Title: IBM Model M Space Saver--$19.99
Post by: talis on Tue, 07 July 2009, 16:02:10
Quote from: ripster;101616
Hmm, good point.  Just tried my Paypal - click on "forgot password".  They just use a simple recheck of phone number or address then send the password to the email address on file.  They even give you the option of using ANOTHER email address.

Crack  someones email and you are 99% there. A simple directory lookup - DONE.

Wonder if they REALLY stand behind their security if someone taps your checking account for $10000.

Really?  That's horrible.  Buy something through e-bay and the seller has 90% of the info they need right there (name, address, phone number, email).  Plus additional information they may use to verify your account (last transaction date/value).

I guess its not really a "newer" way of doing it, social engineering has been used as a hacking method for decades (probably even centuries).  I guess things like facebook/myspace/blogs etc just make it a -lot- easier to gather what used to be considered person information about someone.
Title: IBM Model M Space Saver--$19.99
Post by: bigpook on Tue, 07 July 2009, 18:19:52
Quote from: lal;101561
As long as nobody else has access to your profile data this is BS.



Depending on your password they might have guessed or cracked it, or they exploited some PayPal service to get your pw, or hacked directly into PayPal w/o needing your pw.  I would not believe one word from PayPal.  If you used the same or a similar password somewhere else, everything from above applies to that service too.

It is theoretically possible that a trojan on your system sniffed the pw, but highly unlikely because you're running linux.  Would be something completely new that has never been seen in the wild until today.

No one has access to my paypal account. The password was seven letters and 1 number. I don't think a wild guess would have gotten lucky.
The word doesn't exist in any dictionary and only has meaning to me.

I don't have any bad feelings toward paypal. They caught the fraud before I became aware of it and locked the account. The money is sitting in my paypal account and should be available in a few weeks for me to pull back down.

I live in the U.S. and the "seller" is in the U.K. At least that is what I see in the transaction dispute. Interesting.

Forgot to add that I don't spend much time thinking of ways to screw people over. I try to keep a low profile and practice what I think to be good security.  I am amazed that someone was able to get over on me like that.
People suck.
Title: IBM Model M Space Saver--$19.99
Post by: bigpook on Tue, 07 July 2009, 19:16:01
sigh. but I am doing better now.
Title: IBM Model M Space Saver--$19.99
Post by: DrunkenDonut on Wed, 08 July 2009, 08:00:36
Grrrr.. PayPal... While I haven't had a bad experience with them yet, it's really only a matter of time.

If you use PayPal a lot, you can improve things a little by using the Security Key.. It's a keychain dongle that's $5 (last I checked). Press a button and it'll spit out numbers that PP will check to see if you're really you (or someone who has both your password and dongle). Combine this with a strong password and you'll be in a good position. The technology behind this is good stuff, unfortunately it's PayPal we're talking about so.... results may vary. (PayPal -> Security Centre -> Online Safety Essentials -> Security Tools -> Security Key)

Unfortunately, PayPal has had a history of being rather stupid about security. Password resets, and any number of things aren't handled smartly. Once the dongle is activated, do yourself a favour and go through the process of "forgetting" your dongle at home/office/wherever - You'll find out what info PayPal wants so you can put your own memorable false info in there. ;)

We really need more competition in this space. Google Checkout exists but it's nowhere near as common to find. Doesn't help that eBay and PayPal are tied so close together. Oh, and even more off topic, but related to security, check out the Security Now! podcast (grc.com) if you want to know how all this stuff works. It's a very informative show.
Title: IBM Model M Space Saver--$19.99
Post by: pfink on Fri, 10 July 2009, 17:39:04
Quote from: pfink;101571


http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&ssPageName=STRK:MEWNX:IT&item=250456549110

Ouch. I won this auction for $51.00. How long did you wait before reporting to eBay/PayPal?

Also, what's the process for reporting something like this? I've never gotten scammed on eBay before.


Glad I didn't jump the gun and report this auction to eBay because when I got home from work the keyboard was here. Definitely not the one pictured in the auction photos but it appears to be in decent shape and just needs a bit of a cleaning. I'm pretty happy with it for $51.

I'm guessing this was just a case of reusing somebody else's auction photos to save time. In any case this seller seems to be OK, fast shipping and a decent item. I give him two thumbs up.

I also bought the Space Saving M that Brian O'Neil was selling, so I'll have three of 'em when that one arrives.
Title: IBM Model M Space Saver--$19.99
Post by: bigpook on Fri, 10 July 2009, 17:55:00
Model M mini's. You can't just have one : )