| View previous topic :: View next topic |
| Author |
Message |
Minda
Guest
|
 Posted: Tue Aug 26, 2008 12:41 pm Post subject: Is Gixen compatible with Paypal/Ebay code generator? |
 |
|
| I've got the Paypal/Ebay code generator, which generates the 6-digit code that I have to enter to log into Ebay (code may be appended to password). I wonder whether Gixen supports this somehow? |
|
| Back to top |
|
 |
mario
Site Admin
Joined: 03 Oct 2006
Posts: 7267
|
| Posted: Tue Aug 26, 2008 12:53 pm Post subject: |
|
|
| Unfortunately not - a new code is generated every minute based on an algorithm made by top security experts (RSA security I believe) not to be reproducible. There is no way around this. |
|
| Back to top |
|
|
Guest
|
| Posted: Tue Aug 26, 2008 1:47 pm Post subject: |
|
|
| I might be mistaken, but I believe there may be a very easy way to work with the code generator - by asking the user to enter couple of unused codes for each snipe (i.e. codes generated by the generator, but not used for actual Ebay/Paypal login). I do not see any reason why this would not work. |
|
| Back to top |
|
|
mario
Site Admin
Joined: 03 Oct 2006
Posts: 7267
|
| Posted: Tue Aug 26, 2008 2:37 pm Post subject: |
|
|
| As far as I recall, key generator is a tiny device that displays new 6 digits every minute. You have to use the current code together with your username and password in order to log in. There is no way to know in advance what the code is going to be at the time bid is to be placed. |
|
| Back to top |
|
|
Gixen
Advertisements
|
| Posted: Tue Aug 26, 2008 2:37 pm Post subject: |
|
|
|
|
| Back to top |
|
|
Guest
|
| Posted: Tue Aug 26, 2008 2:53 pm Post subject: |
|
|
| In fact, it only produces a code when switched on and definitely not every minute (the interval is 30-45 seconds). You may skip few codes and login with the next. I am pretty sure that it is not somehow time-synched with Ebay servers, as it would go off-synch with time, also it has no adjustment for time-zones (I first applied it in US Mountain time zone, and now I am in Europe). I am going to experiment with old unused codes to verify the approach that I've suggested. |
|
| Back to top |
|
|
Guest
|
| Posted: Tue Aug 26, 2008 3:09 pm Post subject: |
|
|
I have to admit - you were right. Old codes do not work indeed. The interval for new code is around 40 sec.
I am really puzzled how they ensure that all these generators are in synch ???
I'll have to use another account with Gixen. |
|
| Back to top |
|
|
mario
Site Admin
Joined: 03 Oct 2006
Posts: 7267
|
| Posted: Tue Aug 26, 2008 9:25 pm Post subject: |
|
|
| I believe they do go out of sync, but it takes years. They probably contain an extremely accurate clock inside. |
|
| Back to top |
|
|
Cupid
Joined: 09 Aug 2007
Posts: 7970
Location: Bristol, UK
|
| Posted: Wed Aug 27, 2008 2:58 am Post subject: |
|
|
| mario wrote: | | I believe they do go out of sync, but it takes years. They probably contain an extremely accurate clock inside. |
It depends on the implementation of course, however at least one that I have come across permits the use of a code within about 5 minutes either way of the generation (yes codes that will be generated in the next five minutes are valid now, sounds odd since there is no way that you would know what they are, but bear with me...). Then the code that is actually used and accepted is also used to re-calibrate the clock. In this way a clock that is accurate to within 5 minutes since the last time that it was successfully used is good enough, thats not very accurate really is it? Of course if you don't use it for years then it does go out of sync, but if thats the case there's no point in having it really.
_________________
Mark |
|
| Back to top |
|
|
nochkin
Guest
|
| Posted: Wed Aug 27, 2008 11:08 pm Post subject: |
|
|
The one eBay use is in time-sync with eBay.
As Mario mentioned, they go out of sync but it needs few years for that (when expiration is due, you have to replace your token device). |
|
| Back to top |
|
|
Cupid
Joined: 09 Aug 2007
Posts: 7970
Location: Bristol, UK
|
| Posted: Thu Aug 28, 2008 3:42 pm Post subject: |
|
|
| nochkin wrote: | The one eBay use is in time-sync with eBay.
As Mario mentioned, they go out of sync but it needs few years for that (when expiration is due, you have to replace your token device). |
The token devices I've come across have timing devices but they aren't really clocks, they'd be better described as time counters. These are synchronised at activation by setting an offset on the server. The server always maintains the real time via the internet timing services but the token device itself doesn't really need to do that just keep counting fairly acurately. The offset is held against the account on the server and can be varied as I mentioned. The token devices are produced to a minimum specification to keep their cost low, since there are potentially millions of them that need producing, thats where the real cost savings can be made. The more clever/expensive bits are in the software on the servers, theres not so many of those.
One of the indicators that the device needs replacing is that the offset needs altering frequently, its an indication that the device is running out of battery life or malfunctioning slightly. Thats how some systems get an indication that a device needs replacing, especially if you're entering valid codes that shouldnt have been generated by the device yet, the counters designed to actually run faster when the battery is running low (that doesn't actually take more power to do though).
_________________
Mark |
|
| Back to top |
|
|
Rubin
Guest
|
| Posted: Wed Oct 29, 2008 7:55 pm Post subject: |
|
|
to Mario
Thats weird because I could login into Gixen without the key... If Gixen can login into Ebay without the code, can it bid on my items?? |
|
| Back to top |
|
|
mario
Site Admin
Joined: 03 Oct 2006
Posts: 7267
|
| Posted: Wed Oct 29, 2008 8:03 pm Post subject: |
|
|
| Rubin wrote: | to Mario
Thats weird because I could login into Gixen without the key... If Gixen can login into Ebay without the code, can it bid on my items?? |
I just checked - you logged in to Gixen only because Gixen hasn't found a rejection message it expected, so it (falsely) assumed login was OK. There is no way sniping would work. I will be fixing this shortly (recognition of this situation). |
|
| Back to top |
|
|
jojojo3632
Guest
|
| Posted: Tue Nov 29, 2011 9:02 am Post subject: Verisign Token status update |
|
|
This is an old thread so I thought I should double check.
Are we still facing the same problem with Verisign security tokens and Gixen or has this problem been solved.
I'm trying to get this item: 300629097183
J. |
|
| Back to top |
|
|
Cupid
Joined: 09 Aug 2007
Posts: 7970
Location: Bristol, UK
|
| Posted: Tue Nov 29, 2011 9:39 am Post subject: |
|
|
If you have a code generator that you use to log into eBay than sniping will not work, there is no way around this issue other than to disable the use of that device.
_________________
Mark |
|
| Back to top |
|
|
|
Search
