online security: am I paranoid
Author
Discussion

hairyben

Original Poster:

8,516 posts

214 months

Thursday 2nd July 2015
quotequote all
So, just found a site flogging a copy of a bluray I want, xtra-vision FWIW as I'm not N&S so much as pondering a Q, went to pay only to find 1) I HAD to create an account - no checkout-as-guest and 2) this account included DoB, and a narrow choice "security Q" (eg mothers maiden).

At this point I wonder why does this dodgy little site I've never heard of before want data used for security/ID confirmation purposes about me just so I can bung them a few bucks for a miserable disc. Combined with email address (commonly used as a username/login on multiple sites) and password (many people use the same password across multiple accounts). The thought struck me this would be a great way to data mine- flog reasonably cheap *whatevers* at cost price or thereabouts to undercut the competician, and use it to data harvest by requesting said personal info to complete purchase.

am I just over stressing it, how many would just wap all their details in and not worry about it.

I realise I can just feed it spoof details etc but them you can never use the site again without creating a new email as you forget the spoof details attached to the account using your proper email.

  1. fake moon landings #911 truthers etc etc.

IvanSTi

635 posts

150 months

Thursday 2nd July 2015
quotequote all
I'd also be weary(sp?) of that site. I've never had to give Mothers Maiden name to any site I've ever bought anything from. Try to find it elsewhere, or download a copy.

jep

1,183 posts

240 months

Thursday 2nd July 2015
quotequote all
Yes, but they don't have to be your actual D.o.B. and maiden name. Just pick a memorable date and a word, and crack on.

sideways sid

1,467 posts

246 months

Thursday 2nd July 2015
quotequote all
I have a friend - well somebody who sends me emails occasionally, but always refers to me as a friend - who is a prince in Nigeria.
He always seems concerned about online security.
I'm sure that in return for a donation to the village bridge-building fund, via Paypal, he would provide you with his details to send your disc to, thus avoiding any further worries about the security on the website that you found!
spin

IvanSTi

635 posts

150 months

Thursday 2nd July 2015
quotequote all
jep said:
Yes, but they don't have to be your actual D.o.B. and maiden name. Just pick a memorable date and a word, and crack on.
You're right they don't have to be, but why are they even asking? How many people would just go ahead and plug their details in?

bitchstewie

68,470 posts

241 months

Thursday 2nd July 2015
quotequote all
I don't think you're being paranoid by not wanting to give them those details, but I also think it's unlikely that the site wants them for anything bad - they're likely just clueless.

That said, .co.uk and a WHOIS shows they've been around 10 years but are registered in the British Virgin Isles - nothing directly iffy but does make you wonder who you're actually dealing with.

The real problem comes when they get compromised and someone who isn't clueless now has those details.

soad

34,752 posts

207 months

Thursday 2nd July 2015
quotequote all
What a load of ste! Purchase it on Amazon etc, yeah. Is this some super duper rare title, OP! Well?!

(I'm not angry - just drunk, cheers).

hairyben

Original Poster:

8,516 posts

214 months

Thursday 2nd July 2015
quotequote all
soad said:
What a load of ste! Purchase it on Amazon etc, yeah. Is this some super duper rare title, OP! Well?!

(I'm not angry - just drunk, cheers).
No longer use amazon since they refused to sort a defective wedding list item without us producing the receipt. I'd rather pay more than deal with assholes.

Don

28,378 posts

315 months

Thursday 2nd July 2015
quotequote all
Just give a wrong but known to you important date and a wrong but known to you Mother's Maiden Name.

e.g. 25th Deecember 1970, "ALIEN"


jep

1,183 posts

240 months

Thursday 2nd July 2015
quotequote all
IvanSTi said:
You're right they don't have to be, but why are they even asking? How many people would just go ahead and plug their details in?
I understand, and what you say is valid, but just because that's the default date question that every website uses, it doesn't mean we should input the true facts.

There is so much more to staying safe on the web than what is currently talked about, but I reckon we will only have to endure it for a couple of decades before our kids who've grown up with the online world start to change things.

ooo000ooo

2,647 posts

225 months

Thursday 2nd July 2015
quotequote all
FWIW Xtravision were one of the biggest chains of video rental stores in ireland (north & south) until they went sort of bust a couple of years ago and closed down all or most of their branches. Think they continued as an on-line only concern selling dvd's and stuff. I assume they are legit as they send me emails regularly with their latest offers same as they did before they closed the stores down?