Skip to main content

UPDATE - Problem liegt vermutlich bei eBay

(English summary below.)

Hab noch etwas mehr rumprobiert und dank https://twitter.com/AskPayPal bin ich auf etwas aufmerksam geworden:

 Wenn ich mich bei PayPal (über die ganz normale Seite https://www.paypal.de/) einlogge und dann in einem anderen Tab eBay aufmache, einen Artikel in den Warenkorb lege und dann PayPal als Zahlungsmethode werde ich bei PayPal ausgeloggt!

 eBay macht mir die Session (bzw. den Cookie) kaputt sobald dieser vermurkste Pop-up aufgeht! (Statt die Session die bereits da ist zu nutzen...)

 Kann auch super jederzeit reproduziert werden:
  1. Tab Nr. 1: PayPal öffnen und einloggen (man ist hier auf der Übersichtsseite).
  2. Tab Nr. 2: eBay öffnen, einen Artikel in den Warenkorb legen.
  3. Im Warenkorb auf "Weiter zur Kaufabwicklung" klicken
  4. PayPal als Zahlungsmethode auswählen. (Zu diesem Zeitpunkt ist man in Tab Nr. 1 bei PayPal noch eingeloggt!)
  5. Auf "Weiter" klicken - hierbei öffnet sich das Pop-up und gleichzeitig geht die Session in Tab Nr. 1 kaputt!
  6. Ohne dass man irgendwas in dem Pop-up klickt oder einträgt kann man jetzt auf den PayPal-Tab zurückwechseln und z.B. irgendeine Transaktion anklicken (oder die Seite neu laden). Die Transaktion wird nicht geöffnet, sondern man wird auf die Loginseite zurückgeworfen!
Also liegt die Vermutung, dass hier eBay Mist baut immer näher!

 -----------

 Okay, so a short summary of the above in English: thanks to AskPayPal Twitter did some more testing.

 One thing I did was open PayPal in a tab in my browser, log in and then open eBay on another tab. Then I tried to buy an item and pay with PayPal. I selected PP as payment method and clicked on "Continue". The pop-up opens. Then - without doing anything in the pop-up - I went back to the other tab where PP was open and tried to click on a previous transaction (or I could've tried to reload the page). Instead of getting the transaction information I was redirected to the login page of PP.

 So it seems, that eBay (or the PP pop-up) destroyed my session cookie.

Comments

Post a Comment

Popular posts from this blog

Making a game for the PlayStation 2

Actually, not really for the PS2 - not natively at least. Rather making a game for YaBasic which can be played on the PS2. I started my geek life when I was 11 years old and got my first computer (486). A few years later I found some games written in QBasic on a gaming magazine's CD. That was the first time I came in contact with programming. I didn't understand much back then, because I wasn't taught before and I didn't speak any English (it's my 3rd language...) so I was just trying to figure out how the games worked by modifying stuff. These games were simple text adventures, where you had to make choices and the game would progress that way. There were no commands like "go left" or "pick up". The game presented you all the options and you had to input the number of the option you chose. And instead of "if-else" there were GOTOs everywhere. This was how I made my first game, a multiple-choice quiz with 10 questions. Since I didn...
1 comment
Read more

Copyright needs to die

In latest gaming news: Mafia was released on GOG! Yay! That's great news, because it means that you can get the game DRM-free and guaranteed to work with your Win7 or Win10 installation! (And it's a real classic.) But wait! What's that? You're sitting in a car. Waiting for that famous tune everybody associates with Mafia . You don't know the title or the artist, but you immediately know that song. It plays on the radio. At least: it used to play on the radio. It's silent now. The radio is broken. No sound. Enjoy the view while driving... The game released on GOG all right. Unfortunately due to copywrong it was released without it's original soundtrack. No licensed music. No Django Reinhardt playing Belleville (that's the song you were looking for ;)). All this because copyshit still "protects" music (more like "extorts" people) after over 75 years! Yes, Belleville was first released in 1942. I mean I would get it if co...
Post a Comment
Read more

Nintendo: Hey, listen!

This is a plea for Nintendo, I hope that somebody there will read it. A few days ago you announced the next "Mini" console in your attempt to make even more money of some 25+ year old games, released for the hundredth time. Please. Stop. Or at the very least change your business practices. I hope that I speak for a majority in the gaming community, when I say that we've just about had enough of yet another Nintendo console (or accessory...) which won't be available at launch because you simply can't (or won't?) make enough. We've had enough of the scalpers who pre-order all stock before we even get a chance to look the device up. Enough of the scalpers who then continue to sell those consoles on eBay for double or triple the price. Isn't it bad for your business? Let's talk about a hypothetical scenario: you could sell 1 million of the SNES Mini. But you produce only 500k. That makes 500k of your potential fans/customers angry, because...
Post a Comment
Read more