If You Use the Alt eBay Extension Be Warned

[supbro]

Check cardporn's post on IG. Looks like if you use the extension to check ebay comps they're sending all your info on pages you visit on eBay back to Alt. Who knows what they do with it but all that info is on their servers.

[pejc300]

Just saw this on IG. If you read the whole post you can see how really really bad this is. Catastrophic.

[SGC300ier]

Huh?

Sent from my SM-G991U using Tapatalk

[KhalDrogo]

Reminder of the guy that runs Alt.

https://www.blowoutforums.com/showthread.php?t=1279835

[AbraCalabro]

Could one of you guys screen shot it for those of us not social media-inclined?

Check cardporn's post on IG. Looks like if you use the extension to check ebay comps they're sending all your info on pages you visit on eBay back to Alt. Who knows what they do with it but all that info is on their servers.

Are you referring to Alt, the company owned by Avadar? The same guy who scammed PSA and robbed ArteePower on those Kobe cards? Or is this something else?

edit:

Reminder of the guy that runs Alt.

https://www.blowoutforums.com/showthread.php?t=1279835

Well, that answers that. Thank you Khal

[KhalDrogo]

https://uploads.tapatalk-cdn.com/20210810/d7fb76661ee0fa0ee8d413459f0beeed.jpg

https://uploads.tapatalk-cdn.com/20210810/552a5d05d389a357cc8cb3d6a78c9abc.jpg

[advan24r]

just remember their site people get it mixed up with alt.com vs. onlyalt.com lol....my friend who was curious about it typed in alt.com and was confused at first what they did. that tells you the "deep thinking" they do when coming out with an idea.

[mindcycle]

https://live.staticflickr.com/65535/51370827720_a5d8d1765f_c.jpg

[cboog3105]

oh leore

[AbraCalabro]

Thanks for the screen shots guys.

[SlickRick]

We need a sticky of shady things that major players in the hobby and new sleazy companies have done. I can't keep track anymore. Just in the last week we have kksportscards, we have onlyalt, weve had slabstox pump and dumps.

Give us a sticky

Sent from my VS995 using Tapatalk

[pejc300]

Some people are commenting in the thread that this is normal for pretty much all websites and that you agree to it in the terms of service and this is not a big deal.

I know nothing.

Glad I'm not using it otherwise they would know the secret to my "secret" eBay searches that help me to find steals!

[KhalDrogo]

Some people are commenting in the thread that this is normal for pretty much all websites and that you agree to it in the terms of service and this is not a big deal.

I know nothing.

Glad I'm not using it otherwise they would know the secret to my "secret" eBay searches that help me to find steals!
It’s not normal. Consider that this code allows them to look at your buyer’s information also.

[boxbuster7]

This hobby really attracts some scum

[Eckstein197]

Is this only for the extension or the use of the site in general?

[supbro]

Is this only for the extension or the use of the site in general?

Extension

[pejc300]

Update: they have changed their code:cry:

[regularp]

Scumbag #@#@#@#@.

[RogerGodahell]

Reminder of the guy that runs Alt.

https://www.blowoutforums.com/showthread.php?t=1279835

Could one of you guys screen shot it for those of us not social media-inclined?



Are you referring to Alt, the company owned by Avadar? The same guy who scammed PSA and robbed ArteePower on those Kobe cards? Or is this something else?

edit:



Well, that answers that. Thank you Khal


Man, this guy is looking like a world class thief.

[imbluestreak23]

Horrible

[Kobe101]

Nothing will happen. He will continue to grow and make tons of money.

[cboog3105]

Update: they have changed their code:cry:

cant claim ignorance with that fast of a fix

[duron]

This is up there with some of the worst events we've seen unfold.

We need a sticky of shady things that major players in the hobby and new sleazy companies have done. I can't keep track anymore. Just in the last week we have kksportscards, we have onlyalt, weve had slabstox pump and dumps.

Give us a sticky

Would definitely help.

[imbluestreak23]

We need a sticky of shady things that major players in the hobby and new sleazy companies have done. I can't keep track anymore. Just in the last week we have kksportscards, we have onlyalt, weve had slabstox pump and dumps.

Give us a sticky

Sent from my VS995 using Tapatalk

What happened with the slabstox pump and dumps

[auctionjmm]

Correct me if I'm wrong, but wouldn't the app need your eBay log-in credentials in order to access these pages? Take banking information for example. If someone uses the HTML from your banking page, it should in theory ask them to sign in before viewing it. I know from experience that if I log into eBay from a different computer it normally asks for my PW several times while I'm logged in. I would think any HTML that is linked to a password-protected link would simply lead to a dead link, asking the user to log-in first.

[SlickRick]

What happened with the slabstox pump and dumpsThey got caught linking their 'weekly target' emails to their own cards on an alternate eBay account

Sent from my VS995 using Tapatalk

[Mr E]

Correct me if I'm wrong, but wouldn't the app need your eBay log-in credentials in order to access these pages? Take banking information for example. If someone uses the HTML from your banking page, it should in theory ask them to sign in before viewing it. I know from experience that if I log into eBay from a different computer it normally asks for my PW several times while I'm logged in. I would think any HTML that is linked to a password-protected link would simply lead to a dead link, asking the user to log-in first.

I don't know anything about this app (I just stumbled across this thread), but you might be confusing URL with HTML?


Edit:
For a demonstration of what I mean...
1.) Go to a webpage that would normally be behind a password (ex. open a message in your Ebay messages inbox, or a open a PM in your BO inbox).
2.) Go to File > Save Page As, OR type Ctrl+S, to save the webpage locally on your computer.
3.) Open a browser window that is not logged into that website. (If you saved the page while logged in on Chrome, open a new Incognito window, if on Firefox a new Private Browsing window).
4.) In that new clean window, go to File > Open File (or Ctrl+O) and open the HTML file that you saved in step 2.
Things like message contents will be visible, however things like links to other pages that would also require you to be logged in won't work. If you saved the page (HTML) from a specific ebay message you received for instance, the message contents are all there, but if you try to click the "Reply" button, it'd want you to log in.
5.) Close this new browser window, Delete the HTML file and associated folder you created in step 2.


In contrast, if you just opened a message in your ebay inbox, and copied the whole URL address, then open a new browser window where you're not logged into ebay (Firefox Private Browser, Chrome Incognito, a browser on another computer) and try to go to that URL that you copied, it'd want you to log in first.

[iNashville]

I have used that app and I must say, it is extremely handy and helpful on comps. Still do my own research but it's like a shortcut. Before I installed it, I had that feeling in my gut, like do I really want to install this??? smh

[sickmantz]

How different is that extension from the normal features of Chrome? Doesn't google collect and sell every piece of data you put into their system?

[RogerGodahell]

Does anyone know why SlabWatch is down, is it related to this incident? I know they're different companies but this is the only message you get when you go to their website.

"Temporarily disabled until further notice"

"We are temporarily disabling the best offer feature until further notice. Sorry for the inconvenience."

[SVGbreaks]

Does anyone know why SlabWatch is down, is it related to this incident? I know they're different companies but this is the only message you get when you go to their website.

"Temporarily disabled until further notice"

"We are temporarily disabling the best offer feature until further notice. Sorry for the inconvenience."

Creator of Slabwatch here. We had to temporarily disable our extension as we're focusing our efforts on something much larger and we hope will change the hobby from a tech perspective.

I want to make it clear that we NEVER collected any user information. We are shocked to hear that Alt may have done this with their extension. Our efforts in created Slabwatch was for the hobby and always free of charge.

Thanks to all for your support. What we have coming will truly be revolutionary.

[Spacemanspif]

Creator of Slabwatch here. We had to temporarily disable our extension as we're focusing our efforts on something much larger and we hope will change the hobby from a tech perspective.

I want to make it clear that we NEVER collected any user information. We are shocked to hear that Alt may have done this with their extension. Our efforts in created Slabwatch was for the hobby and always free of charge.

Thanks to all for your support. What we have coming will truly be revolutionary.

sounds awesome, looking forward to what you have cooking.

Also thanks for the clarity on the user information piece. I agree that there are a lot of gray areas that are misunderstood when it comes to personal data and privacy, but what Alt was accused of doing was clearly in the shady / illegal zone, and them changing the code as soon as word broke was basically an admission of wrongdoing.

[RogerGodahell]

Thanks for clarifying that, can't wait to see it.

[Kobe101]

sounds awesome, looking forward to what you have cooking.

Also thanks for the clarity on the user information piece. I agree that there are a lot of gray areas that are misunderstood when it comes to personal data and privacy, but what Alt was accused of doing was clearly in the shady / illegal zone, and them changing the code as soon as word broke was basically an admission of wrongdoing.

Exactly. It is funny seeing people defend them on Instagram. They always seem to have a sign up link to Alt on their page.

If Alt didn't know it was wrong they would have made a public statement and either apologized, played dumb or said it wasn't a big deal.

The fact that they tried to change it without anyone knowing speaks volumes to their intent.

And we know how must of a stand up guy Leore is.