"John so loved his DVX, that He gave His only begotten mattebox, that whosoever believeth in the polarizer should not have reflections, but have everlasting footage."
[quote author=Jim Brennan link=board=Links;num=1098251304;start=15#29 date=10/21/04 at 10:44:42]J_Barnes has a good point about fake pages. I know I've gotten a few that looked like real ones. Granted they were through a link in an e-mail, (which was what made me suspicious) but they sure looked real to me.[/quote]
You sound like a fellow ebay user.
It seems once you make a bid for an item on ebay, your potential for being phished increases. Always be suspicious of a "second-chance offer" for an item on ebay.
There is a way of easily verifying that the PayPal site is legit. If you follow the purchase instructions, it should take you immediately to the PayPal sign-in page. Your email address is your sign-in. On my browser (Netscape), I have the "Forms Manager" activated so that when I get to this page, my email address and password are already filled in waiting for me to click "OK", or "Continue" or whatever. This is already good news, since it means that the browser recognizes the cookie sent from PayPal.
But since we're a little suspicious and a lot of money is involved, you have the opportunity to click on "Forgot Your Password?" If you are still uneasy, pretend that you did forget your password and PayPal will email you the "hint" or however they do it. Only PayPal has this information.
If you decide to skip this extra-cautionary middle step and click "Continue", you should come to the PayPal verification of order page and your complete shipping details should already be there. Again, only PayPal will have this information, not the seller.
[quote author=Jim Brennan link=board=Links;num=1098251304;start=15#29 date=10/21/04 at 10:44:42]... fake pages. I know I've gotten a few that looked like real ones. Granted they were through a link in an e-mail, (which was what made me suspicious) but they sure looked real to me.[/quote]
Be very careful clicking links embedded in email (and even web sites) without being sure where it's going. There's a way to spoof a link so that it appears to link to a valid site but actually goes to another. Here's a very simple example:
Imagine something similar but it leads to a page that looks just like a valid site. It prompts for username and password. Without thinking, you type in that info. Now they have the info and redirect you to the actual sites page. You think 'huh, what happened?' and then enter your username/pwd again but this time it works. You think it was just a glitch and go on without thinking about. Well, now the fake site has the info needed to login into your account. If that account is for your online banking, say buh bye to your money.
Now, how can you protect yourself from this? Don't select links from untrusted email or websites. When you place your mouse cursor over the link, look at the statusbar at the bottom of your browser. It should show the actual link (not the one displayed on the page). Although, it's possible to hide that so it's not guaranteed. If you do click through, take a quick peek at the website url in the address bar of your browser. Did it take you to the site/page that you expected? No, then you might have problems.
Finally, if you are using Internet Explorer there's an even worse problem. It's called url spoofing. Same issue as described above but the url/address bar will display the fake url and not the real one! See this site for more info http://security.openwares.org/.
Btw - Don't use IE if you don't have to. Try Firefox or Mozilla.