Sell online with storefront shopping carts for b2b, b2c.
Read about Turbo Lister's security flaw

The truth about eBay Turbo Lister

Here is the transcript from a chat with eBay customer service. It indicates that the eBay Turbo Lister application exposes the user to a malicious software hacking attack.

——————————————————–

Page

Thank you for visiting eBay selling tool support. My name is Page, may I ask whom I’m speaking with?

[username redacted]

John

Page

Hi John, and how can I help you today?

[username redacted]

This is about Turbolister. Can you help with that?

Page

Yes we do support turbo lister here

[username redacted]

Ok please look at session ID [redacted]

Page

I’m sorry but I cannot referance that session ID. (It looks like a number from another department)

[username redacted]

Ok I will paste in what I wrote before.

[username redacted]

When I launch Turbo Lister, my old ebay user ID from last year appears. Then I click the “If you recently changed your eBay User ID, sign in here.” link. I follow all instructions. Then I get repeated Visual Basic (VB) error messages. This has been going on for a couple of months. It is a waste of time.

[username redacted]

…and the UserID is never changed to the new one once I logout and login again, and I must repeat the process.

Page

If you go to the file menu and select “change user” what is displayed on the manage user window?

[username redacted]

My old userID

Page

ok is there only one entry there?

[username redacted]

yes, the old userID of [username redacted], and it shows 0 items. However, when I go through the process I previously described, and I’m finally accessing the database, all my items appear.

Page

Ok could you close that manage user window and go to the help menu and select “about turbo lister” and give me the version number shown there?

[username redacted]

9.1.102.1

Page

ok go back to the file menu, select change user, and select and open your user file. Once it opens go to the tools menu and select options.

Page

On the options window expand personal information and select eBay account. There click the Change user ID button and enter your current seller ID

[username redacted]

“Once it opens go to the tools menu and select options.” This is not possible, because the “Turbo Lister Authorization” window opens with the message “Sign in to get started with eBay Turbo Lister”.

[username redacted]

Then, refer to my first message, and I must go through the error-filled process.

Page

Does that crash your turbo lister when it takes you through authentication?

[username redacted]

Close. As I previously explained, I get repeated error messages. This is not a hard crash, but close. btw, after clicking the “If you recently changed your eBay User ID, sign in here.” link, then the window is ” Sychronize your eBay User ID for Turbo Lister”. The error is “A Runtime Error has occurred. Do you wish to Debug?” Line 46 Error: Expected ‘)’. And this error comes up close to 50 times

Page

Earlier you mentioned that your inventory was available after you went through the sign in. Are you completely unable to get turbo lister open?

[username redacted]

No, After clicking “no” on all the error messages, Next is “Grant application access: eBay Turbo Lister…… (terms)….I agree”. Then I can access my TL, and see the listings for [username redacted]

[username redacted]

(well, more error messages after clicking “I agree”)

Page

OK go ahead and get your turbo lister open, then go to the tools menu

[username redacted]

ok. done…

Page

ok use the personal information > eBay account and change your seller ID there, and then click apply then OK, then close turbo lister and restart it

[username redacted]

There is no “personal information” menu choice in any menu…whether grayed out or active

Page

on the tools menu select options. This will open the options and preferances window.

Page

On the options and preferances window the first option to expand on the left is Personal information

[username redacted]

ok, I see. Please wait

[username redacted]

I must go through the same process, except for the first browser window, which I don’t see. (I see the second browser window.) Still same VB error messages.

Page

Ok close turbo lisetr then set the following in your internet explorer browser:

[username redacted]

I don’t use IE…well, I don’t like IE. I have only IE 6 and prefer current FF. But, I realize that TL uses IE for that browser window.

Page

Turbo lister uses internet explorer to manage it’s connection to eBay.

[username redacted]

I do not wish to upgrade to IE 8/9. Can we change the TL browser to FF?

Page

You’ll need to close any browsers you have oppen (including this chat) before opening IE so that the settings are applied correctly

Page

No

[username redacted]

Go ahead…

Page

Once turbo lister and any firefox windows are closed open IE and follow these steps:

Page

1. Click the “Tools” menu and select “Internet Options.”

2. Click the “Advanced” tab.

3. Under the “Browsing” heading, make sure “Disable Script Debugging” is checked.

4. Also under the “Browsing” heading, make sure “Display a notification about every script error” is not checked.

5. Click the “Security” tab at the top of the “Internet Options” box.

Page

6. Click the “Internet” icon to the left, and then click the “Custom Level” button.

7. In the “Security Settings” screen, scroll down to the “Scripting” section.

8. Select the “Enable” buttons under “Active scripting” and “Scripting of Java applets.”

9. Click the “OK” button to close the “Security Settings” screen.

10. Click “OK” button to close the “Internet Options” screen.

Page

Once that’s done reopen turbo lister and sign in again

[username redacted]

I cannot accept those reduced security allowances. This opens IE to hacking and malicious access.

Page

Turbo lister requires these settings for it to process the authentication properly

[username redacted]

If I upgrade to IE 8/9, will those steps become unnecessary?

Page

No, it will still require those settings.

[username redacted]

This is completely unacceptable.

Page

If you cannot apply those settings I would suggest using a different listing tool.

[username redacted]

Of course. I do not think that the objective, Internet security community will support eBay’s policy here.

Page

Was there anything else I can assist you with?

[username redacted]

I think they will ridicule eBay for allowing and supporting this policy and process.

[username redacted]

no Thank you.

Page

Thank you for using eBay Live chat. We appreciate your business on eBay and I wish you luck in all of your eBay transactions. Have a wonderful day!

[username redacted]

But, I must report this.

[username redacted]

ok bye.

Chat Session Ended, Goodbye. (5010)

Share

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>