CURRENTLY 1907 VISITORS

(Forum Home)--->(System Info & Announcements)--->(Additional Security Measures)
Thread Admin: AuctionArmsCeo (6-0-0) (Last 10 Posts) Posted: 02/20/2009 at 17:47:30
Total Posts: 87
Thread Title: "Additional Security Measures"
AuctionArmsCeo Unfortunately, we've had to implement a new security measure which we hope won't inconvenience too many folks. In closed auctions, we've now screened all bidder nicknames, except to those that have participated in the auction. In other words, if you're a bidder, you can see your nickname and the seller's nickname. If you're the seller, you can see all the bidders. If you're not participating in the auction, you can only see the seller.

The reason we chose to implement this change is because of fraud. "Black Hats" were contacting bidders by taking their nicknames and adding an @aol.com or @hotmail.com, or @yahoo.com to their existing nicknames. They were impersonating the seller, and asking for money, stating that the high bidder had backed out.

The best way to combat this, is to make it hard for the fraud to contact the high bidder be masking the high bidder's nickname.

Let me know what you think, and thanks for your patience.
-manny

(Start a Thread) (Forum Rules)

Thread Admin: AuctionArmsCeo(7-0-0) Post#71 - Posted: 03/12/2009 at 14:18:15
AuctionArmsCeo Just so everybody understands what is going on: The security measure only applies to closed auctions. This does not apply to open auctions. Everything is still visible in open auctions, and will likely stay that way.

If you are a seller, and you're logged in, you can see everything related to your auctions. Buyer and all bids. Open and closed auctions.

This wasn't an attempt by big brother to slowly erode your freedoms. This is a legitimate attempt to stop those who bear us ill will from being able to prevent us from having a marketplace that benefits everyone. There are con-artists out there who have been filling the internet with emails that are indistinguishable from our own, and a few of our buyers have been taken for a ride. In short, they've been somewhat successful in jamming our signals. This is our attempt to jam theirs.

-manny

Former Seller: Bubba J(65-0-0) Post#72 - Posted: 03/12/2009 at 14:53:25
Bubba J Manny: Why don't you seriously consider item #2 in my Post #66. How much easier and user friendly can it be? I doubt if there would be many, if any, who would complain about this requirement. Many other sites require this simple step. WHY NOT AUCTION ARMS????

FR&G

Former Seller: Hagrid(34-0-0) Post#73 - Posted: 03/12/2009 at 17:08:36
Hagrid Manny, I call attention to the last sentence of your thread."Let me know what you think". As I read the responses, I see that most all of us have let you know what we think. The question is, are our suggestions to be dismissed? Do you really want to know what we think?. From my e-mails and from the responses I find here, I think most of us do not like the idea. I realize this is your buisness and not a democracy and you certainly have the right to run it as you se fit. But requiring a nickname, different from your e-mail, makes enough sense that JCG's did it over a year ago. I have changed mine and will change it again if I get the return phone call your message promised. trapper

Former Seller: WILLIE TA(1461-0-1) Post#74 - Posted: 03/12/2009 at 18:36:33
Post removed by: GunAuction.com staff...

Former Seller: WILLIE TA(1461-0-1) Post#75 - Posted: 03/12/2009 at 19:40:59
WILLIE TA DID NOT SAY ANYTHING BAD.. WHY WAS IT REMOVED? AND BY WHO? GUESS WE CAN'T TALK ON FORUMS SO E MAIL WILL GO BETEWEEN SELLERS WHERE YOU CAN'T SEE IT TO CENSOR IT.

Buyer: ODOTER(77-0-1) Post#76 - Posted: 03/13/2009 at 05:17:16
(no avatar) Manny: With all due respect, I don't believe you are giving the scammers much credit. Certainly, you have heard that some of the finest minds in this world belong to the criminals. Without calling myself a criminal, I can use your present system and still know who the second bidder is as long as I placed a bid earleir in the auction or put the item on my watch list. Certainly, you are aware of that. As long as a scammer has done that, he can see the so called "hidden bidders" list once the auction has closed. It doesn't take much effort to decipher the scond bidder's name from that list if the second bidder didn't come in at the last second. Even if he did and his nickname wasn't shown earlier, you can take a pretty good guess if you watch the site very much. So, your method is not foolproof, nor is the method going to produce a long term solution to the recognized problem. AA just made the scam a little more cumbersome, but if the scammer can still see enough profit in it, and I am sure he can, he will just snicker a little and add the extra effort. He just has to target his prey beforehand. Certainly, he is going to take some wild shots, but it's like the drunk going to everyone woman in the bar trying to proposition them. He's going to get his face slapped, but sooner or later, he is going to get lucky. Change the nicknames so they do not match the owner's email. It's just too simple to ignore. I'm thinking AA doesn't want to do this because of all the work to move the feedback to the new nicknames. Could that be true?

Thread Admin: AuctionArmsCeo(7-0-0) Post#77 - Posted: 03/13/2009 at 12:52:32
AuctionArmsCeo Fully a third of our registered user base use the first part of their email address as their nickname. I personally do it all the time, just because it's hard enough remembering all the passwords I have to remember - I don't think I would survive having to remember all those IDs. Our reluctance to adopt such a policy has nothing to do with the technical difficulty (it's actually very easy) - it has everything to do with inconveniencing folks.

That being said, we've come up with another idea that might sit better with everyone. Instead of hiding IDs from everyone except the participants, we could hide the entire closed auction - unless you're logged in, in which case you can see everything. By making everyone have an account at Auction Arms in order to look at closed auctions, that'll make any potential scammers have to go through another layer of security that they currently aren't required to jump through. But it won't keep regular users from seeing activity. This also seems to make sense for the Bid History of open auctions, too.

Comments?

And Herb, I don't know why Bob removed your post, but I'll check.
-manny

Former Seller: WILLIE TA(1461-0-1) Post#78 - Posted: 03/13/2009 at 13:49:57
WILLIE TA MANNY....THANKS FOR GETTING BACK... AS FAR AS THE OTHER THING WE TALKED ABOUT 3 MONTHS AGO I WOULD STILL LIKE TO DISCUSS IT WITH YOU..ALSO I HAVE MORE MONEY MAKING IDEAS FOR YOU....THANKS AGAIN..HERB

Buyer: ODOTER(77-0-1) Post#79 - Posted: 03/13/2009 at 13:55:46
(no avatar) Manny: I'm not sure how logging in will stop anything as it pertains to the scammers. Maybe you could explain it a little more, because I am thinking like this. Let's say the scammer gets an account, logs in, looks at the bidding history, and gets the name of the second bidder. He then logs off and sends a notice to the second bidder. Let's also say that 20 other people logged in and looked at the bidding history. If the scammer makes his contact, inititates his scam, and walks away with his money, what trail did he leave for AA to pick up and find him? How does AA identify him among the other 20 lookers?

Former Seller: Bubba J(65-0-0) Post#80 - Posted: 03/13/2009 at 15:28:44
Bubba J Manny: Since many, if not most of all, my listings and sales are of a consignment type, I provide the actual owner of the item the site location where it is listed for auction/sale, my user name in order that they may search for their item and any others that I may have for auction/sale, as well as the auction/sale number in order that they can track the auction/sale progress if they wish. Buy only allowing a registered user to view a closed auction would prevent my clients from viewing their item once it is won/sold.

Please reconsider the system option of requiring user names to not match e-mail addresses. There should not ba an issue with remembering passwords since they would only change if the user wished to change them. I have a list on paper and on a CD of all my many, many accounts with user names and passwords since I can not remember all of them either. These lists are well hidden and my wife and I only know how to access them. They are encryped as to make no sense at all to anyone but us.

Thanks,
FR&G

(Beginning)   (Go Back 10 Posts)   (Next 10 Posts)   (Ending)