Updated Ebay android app is security risk.

ploddo

I have to say that the new ebay app is surely a security risk. I recently made a purchase on my tablet, clicked the pay button and before I could blink, had paid for it via paypal, without being asked to log in. This means if my tablet/phone is lost or stolen anyone can use the ebay app and spend loads of my hard earned cash quite easily. It would be maybe a month before I got a statement from the card company and noticed this going on. I will be deleting it, it is a security risk that shouldn't be allowed. I have been told there is no way to turn on the log in requirement either.....

Flyonthewall

When using any device it asks if you want to use the quicker payment option which means it remembers your details on that device so you can pay in just a click. It's the same if you're using a computer.

I don't know if there's any way to turn it off using a phone/tablet, but you can stop it doing that on a computer. I should imagine if you cleared your browser cookies/history it would forget the log in.

forgotmyname

No issues on my phone. ebay logs me out after about 10 seconds of not using it.

PITA it is.

Whilst on the PC i saw the link to the faster payment and thought not a chance.

ploddo

This was the first time I had used it. Didn't see any 'faster payment' offer. I just clicked on the pay now. Paypal popped up and while I was waiting for the 'log in here' button it switched to paid. I have never used PayPal on this tablet. Seems very dodgy to me.....

RFW

You'd have to log in to change the address, so if anyone stole your phone and bought something they could only send it to your address.
Not sure what the panic is.

ploddo

By the way, I don't have faster payments on my PC either.

ploddo

RFW wrote: »

You'd have to log in to change the address, so if anyone stole your phone and bought something they could only send it to your address.
Not sure what the panic is.

No panic. Just think its bad form to make payments without logging in. Even if the address couldn't be changed, it would be no fun receiving items through the post that you don't want but have paid for. Just imagine explaining that you didn't order them to your bank!

Flyonthewall

forgotmyname wrote: »

Whilst on the PC i saw the link to the faster payment and thought not a chance.

lol my thoughts exactly

ploddo wrote: »

This was the first time I had used it. Didn't see any 'faster payment' offer. I just clicked on the pay now. Paypal popped up and while I was waiting for the 'log in here' button it switched to paid. I have never used PayPal on this tablet. Seems very dodgy to me.....

Oh right. Odd.

RFW wrote: »

You'd have to log in to change the address, so if anyone stole your phone and bought something they could only send it to your address.
Not sure what the panic is.

I wouldn't say there's any panic, just concern. Even if it's getting sent to your address what's to stop someone buying loads of things on your account? You could end up with a load of items you don't want which means a lot of hassle for the person whose account it is as well as the sellers.

RFW

Flyonthewall wrote: »

I wouldn't say there's any panic, just concern. Even if it's getting sent to your address what's to stop someone buying loads of things on your account? You could end up with a load of items you don't want which means a lot of hassle for the person whose account it is as well as the sellers.

Well surely someone could steal your phone and bid on loads of stuff before that? There are loads of potential security risks whatever we do. Someone stealing your phone is up there with someone stealing your wallet or bag. If you get your wallet stolen you need to cancel credit cards, etc. If you have the Ebay app and your phone gets stolen you may have to consider alerting Ebay/Paypal, or if you're that worried don't have the app.
There's loads of stuff that would be on a smartphone that could cause problems if it was stolen and could be easily accessed.

Flyonthewall

RFW wrote: »

Well surely someone could steal your phone and bid on loads of stuff before that? There are loads of potential security risks whatever we do. Someone stealing your phone is up there with someone stealing your wallet or bag. If you get your wallet stolen you need to cancel credit cards, etc. If you have the Ebay app and your phone gets stolen you may have to consider alerting Ebay/Paypal, or if you're that worried don't have the app.
There's loads of stuff that would be on a smartphone that could cause problems if it was stolen and could be easily accessed.

That doesn't mean you should be alright making it even easier for them to do things on your account and, worse still, spend your money. Ebay/Paypal could make the app more secure. Sure you may worry that people can still bid if they steal your phone, but it's not as bad as losing money (even if you do get the items from it).

I don't have the app, I don't use my smartphone to buy anything. Even if I downloaded it just to bid on/look for/watch items though it's not good if someone else could then just buy stuff through it if they got hold of my phone.

RFW

Flyonthewall wrote: »

I don't have the app, I don't use my smartphone to buy anything. Even if I downloaded it just to bid on/look for/watch items though it's not good if someone else could then just buy stuff through it if they got hold of my phone.

That's the choice you make using it. You can unlink Paypal account. Some people want a choice to buy and pay for something with one click.