Power Sellers Unite

CuFF · Posted: Mon Jun 04, 2007 10:59 am Post subject: Security Issue at BV

http://www.bidville.com/community/messages/thread.asp?thread=1128106&forum=300

Home Improvement : Serious need here

GLORIOUSMORNING (8) Posted 5/28/2007 10:15:04 PM

--------------------------------------------------------------------------------
It would be nice if the powers that be would have at least a secure sign in page. As it is every time we log in we do it without protection.

coneyisland (46) Posted 6/3/2007 9:00:48 PM

--------------------------------------------------------------------------------
Try clicking the Lower left logo of Security Metrics.. OUCH!

https://www.securitymetrics.com/site_certificate.adp?s=69%2e64%2e168%2e20&i=47456

Site Certificate Not Found

We cannot find the Site Certificate you are looking for!

Possible Reasons

1. The link on the referring web site may be incorrect.

2. Occasionally hosted sites or sites with bad reverse-dns lookups have information mismatches that need to be manually reviewed. If you suspect this is the case, please contact SecurityMetrics Support.

3. The referring web site may have had it's account terminated.

4. The referring web site may be fraudulent. If you suspect this is the case, please send an email to abuse@securitymetrics.com with the URL of the site in question.

:?: :?: :?: :?: :?: :?:

CuFF · Posted: Mon Jun 04, 2007 12:22 pm Post subject: Re: Security Issue at BV

Don't know why another thread was posted re: BV's security issue. TRUSTe is a mediator for security issues which means a security issue would have to be reported before anything is resolved. TRUSTe is who you would contact in the event the site is not secure. They mediate security and privacy concerns.

Choose to Hold TRUSTe Members to Higher Standards

TRUSTe® does everything we can to ensure that the privacy of your personal information is protected by our member Web sites, but we also rely on your vigilance to keep members accountable.

The Watchdog Dispute Resolution Form is an online tool that allows you to report violations of posted privacy statements, specific privacy concerns pertaining to TRUSTe member Web sites, and violations by Networking Advertising Initiative members of the Online Preference Marketing Principles.

Before completing the Watchdog Dispute Resolution Form, please follow these steps:

Confirm that the Web site in question is a TRUSTe member
Verify that the complaint is a privacy matter relating to a TRUSTe member Web site
Contact the TRUSTe member Web site first
If the TRUSTe member does not resolve your complaint quickly and satisfactorily, TRUSTe will review your complaint and mediate a solution. Please learn more about our dispute resolution process, review our Watchdog reports, and – if you have an unresolved dispute with a TRUSTe member – click "Next" to fill out the Watchdog Dispute Resolution form.

Maybe someone should email TRUSTe before something bad happens instead of worrying about BVs reputation. It's kind of clear that BV management isn't at all concerned. The OP was posted on 5/28. They've had a week to resolve it.

Justjoansetc · Joined: 22 Nov 2005 Posts: 275

As Usual..........To the rescue save us from it all!!!!!!!!!!!!

"YOU HAVE TO AC-CENT-TCHU-ATE THE POSITIVE
ELIMINATE THE NEGATIVE,
LATCH ON TO THE AFFIRMATIVE,
AND DON'T MESS WITH MISTER IN BETWEEN."

CuFF · Posted: Mon Jun 04, 2007 12:52 pm Post subject: Re: Security Issue at BV

Who are you protecting Joan? Certainly not the members of BV. I find your attitude disturbing. :roll:

Justjoansetc · Joined: 22 Nov 2005 Posts: 275

Why on earth do you think I am protecting anybody.
I LIKE BIDVILLE and it works for me.

I find your attitude the disturbing one.!!!!!

"YOU HAVE TO AC-CENT-TCHU-ATE THE POSITIVE
ELIMINATE THE NEGATIVE,
LATCH ON TO THE AFFIRMATIVE,
AND DON'T MESS WITH MISTER IN BETWEEN."

angelsolutions · Posted: Tue Jun 05, 2007 10:15 am Post subject: Re: Security Issue at BV

Remember, joan...only those who attack, ridicule and insult in the name of the "truth" from their own perspective are heard here. :shock:

Never mind that even eBay could fail this week, but there are those here that are bent on making sure that others don't succeed and fewer positive minded people post.

CuFF · Posted: Tue Jun 05, 2007 10:24 am Post subject: Re: Security Issue at BV

How nice of BV management to re-post an old announcement regarding the boards...

Posted by support (2) on 9/23/06 11:21:11 AM

Message Boards LOCKED

Valued Members,

Until further notice, the Member to Member Message Boards will be unavailable on Bidville.

Unfortunately, these forums are a significant burden on the operations of Bidville. We receive almost as many daily Customer Service requests related to `issues` on the boards as we do for auction related activity. On a daily basis, we have members asking us to inactivate their account because of something they saw on the boards or some `argument` they are in. We simply can not continue to allow this.

We truly do believe in the development of a cohesive Bidville Community. A Community where members can come to relax and have fun - maybe even learn something or solve a problem. As it stands, the boards cause more problems than they solve.

As we transition over to new management, employees and customer care representives, we hope to have the resources to reopen to boards.

Thanks for continuing to grow with us.

Support

They took valuable time away from "the transition" to do this, but, did they fix that security issue yet?

knappschiles · Joined: 25 May 2005 Posts: 4035 Location: Wi

I'm not sure who is trying to ridicule who here.

But I do appreciate Cuff reporting on issues at BV.

Frankly, the security cert IS a serious issue. And closing the boards is another sign that the site is going down the tubes. A couple of other sites have done that lately and have been blasted for it.

When the site was sold to Ubid there had been hope that things would improve. But it's been nearly a year now and if anything things are worse than ever. It's like Ubid bought the site then dropped it in a black hole somewhere and totally forgot about BV.

This whole mess doesn't exactly inspire sellers to use BV at all.

Carol

2BOYSandTOYS · Joined: 14 Mar 2005 Posts: 10095 Location: Kansas

OK - here's the thread that discussed 'security' - thanks Carol for sharing....otherwise it would not have floated on my radar screen.

I think the post about the boards is an 'example' and not recent, but didn't go to the boards there to verify!

I did visit the site and it is not giving me a 's' when I go to the sign-in page. My experience and learning from all the fine folks here does tell me that logging in at Bidville is NOT secure. Can someone 'validate' this for me?

CuFF · Posted: Tue Jun 05, 2007 4:04 pm Post subject: Re: Security Issue at BV

Hi Erin,

Yes the s indicates secure.

The thread above posted on 9/23/06 was just re-posted to the Announcement board. I'm not sure why, but I do know it was removed from the list of announcements until now. Why it was put back I do not know. There was a discrepency in the date that appeared at the forum header and the first post in the list, but now that the thread has been reposted the dates on the exterior and interior of that forum now match. I have a screenshot of it somewhere. I wondered what the missing thread was about, and why it was deleted. Now, I wonder why it was put back :lol:

Thank you knappschiles, and Erin too. I appreciate that you shared your views regarding the ridicule going on in this thread. I almost slipped to that level, but I'm better now. :)

2BOYSandTOYS · Joined: 14 Mar 2005 Posts: 10095 Location: Kansas

Well.....darn it anyways....I am 'paranoid' (if that's what it is) enough to not want to sign into a site that is not secure.... :( :(

I suppose this does need to be shared at the Yahoo Group - which will probably cause a bit of a flurry.... :? 8)

I will say that I do like the back end of BV - I did when I listed there before, and had almost forgot what it was like. It's set up nicely for sellers!!

Thanks for clarifying CuFF!!!

CuFF · Posted: Tue Jun 05, 2007 4:40 pm Post subject: Re: Security Issue at BV

BV has some wonderful features, my favorite being the Personal Message feature. No other site has that to my knowledge. When I first came to BV from Yahoo it was because of the way the site was set up. It's a smooth running, efficient place... Sellers need BV or something like it. It's such a waste to have it sit idle when there's no other site that offers such a slick auction format.

In looking at the dates and titles of the announcements you can see a definitive difference in the way the site's been handled in the past as compared to how uBid is handling it now. Management supported it's Sellers. They kept them up to date and posted when there were site issues. They sponsored sales and BV was upbeat. G Parker may have sucked a million dollars out of BV, but he also did it a lot of good.

BV is not suffering because of perceived bashing. It's suffering because of poor management. I believe and always have that people can make a difference, but when opinions are suppressed onsite and management is not made to be accountable to its paying members there or anywhere else it will eventually kill a site. How unfortunate that would be.

GIGI · Joined: 23 May 2007 Posts: 30

Out of curiosity-I did a search today on Who-Is.
The results are listed:

this is the link I used on who-is:

http://www.networksolutions.com/whois/index.jsp

The following list are those auctions/stores on the Auction Site Count
That were found to be insecure. Not Secure.

Bidville
Blujay
Wagglepop
Hi Bidder
Plunderhere
Bid Alot

I could'nt find out anything on the uk site.

Just thought I'd share.

CuFF · Posted: Tue Jun 05, 2007 5:51 pm Post subject: Re: Security Issue at BV

BV management has removed the Secure icon that was next to the TRUSTe icon at the bottom of the page. Removing the emblem does not make BV secure. It just shows that they understand there's a problem. If that's their solution then they are more enept than I ever imagined.

GIGI go in and click on View/Edit My Profile in MyBidVille and you will see that nothing is secure at BV. Do those other sites take your credit card information? I know that PlunderHere doesn't, and I know that BV does. It might be worth checking out before someone gets their identity stolen or something.

CuFF · Posted: Tue Jun 05, 2007 6:08 pm Post subject: Re: Security Issue at BV

These are the registration and or login pages from the sites you listed...

https://www.bid-alot.com/login.php

https://plunderhere.com/auction/cgi-bin/Register?sessionID=79kgx83d7ksnrjfbyfmzn3tx3aumv8k3

https://www.hibidder.com/register.php

https://www.wagglepop.com/bin/Register?sessionID=47550477-y89qxanm255q5tj3bvebidd

http://www.blujay.com/?page=loginr

http://www.bidville.com/register/

With the exception of blujay and bidville all are secure pages. I just really can't believe that BV management removed that emblem. It makes me wonder what they're really up to over there, and it should make you wonder too.