renewed my SB Subs on eSellerate with PayPal

[NewsArchive]

I have just renewed my SB annual subscription on eSellerate and used my PayPal account
to make the payment.

However, I am surprised (and not happy) that eSellerate remembers (and used) my PayPal
password. Everywhere else I have used my PayPal account, I am prompted for the
password.

Watch out when using eSellerate. I am going to change my PayPal password, and
hopefully I can remember it for next time :-)

This is not complaining about Lindersoft, but posted as a warning for others. Maybe
somewhere in the dark, distant past, I did not un-check a box to have eSellerate
remember the password.

JohnG

[NewsArchive]

I have never seen that anywhere.

Jeff Slarve
www.jssoftware.com
www.twitter.com/jslarve
I'll search help files & Google for you.
#JeffWeCan https://www.youtube.com/watch?v=6UsHHOCH4q8&feature=youtu.be

[NewsArchive]

but I don't use paypal on that site.

I meant to say that I've never seen that on any site where I use
Paypal.

Jeff Slarve
www.jssoftware.com
www.twitter.com/jslarve
I'll search help files & Google for you.
#JeffWeCan https://www.youtube.com/watch?v=6UsHHOCH4q8&feature=youtu.be

[NewsArchive]

Hi John,

> However, I am surprised (and not happy) that eSellerate remembers (and used) my PayPal
> password. Everywhere else I have used my PayPal account, I am prompted for the
> password.

I use paypal a bit as I sometimes get paid via paypal, but as far as I
can recall I'm _always_ taken to a paypal page to log in and authorize
payment!

Best regards,

--
Arnor Baldvinsson - Icetips Alta LLC

[NewsArchive]

John,

> However, I am surprised (and not happy) that eSellerate remembers (and used) my PayPal
> password. Everywhere else I have used my PayPal account, I am prompted for the
> password.

Get in touch with PayPal. PayPal does NOT want that.

--
Lee White

RPM Report Viewer.: http://www.cwaddons.com/products/rpm/
RPM Review........: http://www.clarionmag.com/cmag/v11/v11n06rpm.html
Report Faxing.....: http://www.cwaddons.com/products/afe/
---Enroll Today---: http://CWaddons.com

Creative Reporting: http://www.CreativeReporting.com

Product Release & Update Notices
http://twitter.com/DeveloperPLUS

Windows 8 brings us "The Oval, Bumper Car, Roller Coaster of Wait!"

[NewsArchive]

payapmf.com is available!

Jeff Slarve
www.jssoftware.com
www.twitter.com/jslarve
I'll search help files & Google for you.
#JeffWeCan https://www.youtube.com/watch?v=6UsHHOCH4q8&feature=youtu.be

[NewsArchive]

Jeff,

> payapmf.com is available!

It's been a while since I've seen those 4 letters together!<g>

Lee White

[NewsArchive]

And the receipt from PayPal...

Anyway, the password has been changed, so won't happen again.

JohnG

[NewsArchive]

Hi John,

I have contacted Digital River / eSellerate. I'll keep you posted on this.

Friedrich

[NewsArchive]

Hi Friedrich

Many thanks for being concerned, but I doubt they will tell you anything meaningful.

I do use my PayPal more than I should buying other stuff from the internet, so I know
that no one else has my password saved, I get prompted every time to login. OK that
they know the email address associated with the PP account, but _not_ the password.

Anyways, eSellerate are Sh*t Out Luck now as I have a new pwd <g>.

John

[NewsArchive]

But everyone could guess "RussRocks!", change it to something else. :-)

--

Russ Eggen
RADFusion International, LLC

[NewsArchive]

Unless they use Oauth<g>

Jeff Slarve
www.jssoftware.com
www.twitter.com/jslarve
I'll search help files & Google for you.
#JeffWeCan https://www.youtube.com/watch?v=6UsHHOCH4q8&feature=youtu.be

[NewsArchive]

Hi John1

You may not be seeing what you think you're seeing.

I have used PayPal for a number of years now, for all manner of e-sales
from a variety of retailers.

What I understand happens is that PayPal maintains an encrypted cookie
on your PC that contains your user ID (email) and password.

When you indicate that you want to use PayPal to pay, the merchant
connects to PayPal, and passes in the amount of the transaction. PayPal
then checks for the encrypted cookie, opens and fills out the form in
THEIR server, and passes the page to you. The merchant cannot see this
page, or any of the information on it. All the merchant receives is an
OK/Cancel message from PayPal. Only you and PayPal ever see your PW.

Craig E. Ransom
Tracker Software Products, Ltd.
http://tracker-software.com/

[NewsArchive]

John,

I have discussed this with eSellerate / Digital River.

The short answer is, they NEVER had your PayPal password at all - not even
for a moment. PayPal stores that securely and doesn't share it with anyone,
including merchants who accept PayPal payments!

When you placed the original order - and authorized future billings at that
time - you had to log on to your PayPal account on PayPal's logon servers,
not on the Lindersoft eSellerate store. PayPal is understandably very
protective of their customer information, and they won't allow any third
party to host the log on process; that actually has to happen on PayPal's
servers. So merchants who accept PayPal payments NEVER see, receive or
store the customer's PayPal password or anything like that at all. They
just have an approval code from PayPal.

I hope this helps to clarify.

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

--Helping You Build Better Installations
--SetupBuilder "point. click. ship"
--Create Windows 10 ready installations in minutes
--Official COMODO Code Signing and SSL Certificate Partner

[NewsArchive]

Hi Friedrich

Thanks for the feedback.

>When you placed the original order - and authorized future billings at that
>time - you had to log on to your PayPal account on PayPal's logon servers

Someone is telling false tales. Today I went to my PayPal account and checked that I
had no stored "authorized future billings".
There was one there from about 10 years ago for GoDaddy for domain name renewals.
But I have not used Godaddy for 8+ years, and there have been no subsequent charges. I
killed that authorized payment today.

Somehow eSellerate skipped asking me for the password, maybe because last time they
stored a cookie (or something) on my PC. Then they were able to authorize the latest
PP payment.

Anyway, I just think someone did something illegitimate. But not you. <g>

JohnG

[NewsArchive]

John I don't know if this has anything to do with this but for ever I have
had forms come through apparently asking me to confirm what look to me like
valid transactions from PayPal. The forms look identical to a PayPal screen
but because I know PayPal would never send these I NEVER click on these.
When I look at the form there is ALWAYS a spelling mistake or giveaway
somewhere.

I am wondering if you have ever clicked on something like that inadvertently
in a hurry?

I got several some time back that were scary. They were actually pretty
darned close to valid transactions I had made. The right amount, the right
store, the right location etc. How they knew that I have no idea. But of
course PayPal would NEVER ask me to Login and authorize.

Just a thought.

John