PayPal reportedly hacked

that's why you save the recovery code, put that code in paper and store that paper in your home
I don't recall Paypal giving me recoverycodes, however they give you the option to add multiple "other" ways to get access to the account, as email, phonenumber and passkey ontop of 2FA.
I can not find a Paypal recoverycode file in my backups at least.
 
Ever clicked pay an entered PayPal information to be redirected? It wouldn't surprise me some dumb website scraping the input logs.

Whatever the issue it isn't PayPal.

Right, but that isn't the payment process either. I receive a ton of PayPal phishing emails. I suspect a lot of people fall for those. Yeah, shady websites as well.
 
This is bat shit crazy…

A surveillance profile on users?

I think what's crazy is that it's 2025 and some of you guys don't even understand this. This is literally how the largest companies in the world derive much or most of their revenue. Internet surveillance is a massive driver of the economy and it's all financed by our tax dollars.

And look at you guys throwing out the "tinfoil hat" like it's 2005. The fun thing about the internet is that you can't tell who's sincere or not, but honestly, I can't believe some people could be so naïve.
 
I think what's crazy is that it's 2025 and some of you guys don't even understand this. This is literally how the largest companies in the world derive much or most of their revenue. Internet surveillance is a massive driver of the economy and it's all financed by our tax dollars.

And look at you guys throwing out the "tinfoil hat" like it's 2005. The fun thing about the internet is that you can't tell who's sincere or not, but honestly, I can't believe some people could be so naïve.

How is 2FA making surveillance any easier versus just vanilla username and password? Big data has been a thing for a while and it exists regardless of your authentication method.
 
Last edited:
Thanks for the heads up. I just reset my password and logged out of all devices. I rarely use PayPal, and my credit card info is probably outdated on there, but better safe than sorry.
 
How is 2FA making surveillance any easier versus just vanilla username and password? Big data has been a thing for a while and it exists regardless of your authentication method.

It connects your phone number with whatever profile you use for a given web service as well as your tracker cookies. And then after that, each time you use the 2FA you are confirming that is your phone number and you are still using it.

It's a good question and I'm glad there's some genuine interest. These are also questions Grok is pretty good at answering, so for anyone interested in why 2FA makes you less anonymous (in addition to being extremely inconvenient), now it's easier than ever to know why and how.
 
I fucking hate two factor authentication, it's the worst. It exists so that companies can build a surveillance profile on users in the name of "security." When there was an astroturf campaign on the internet promoting it five or six years ago I just rolled my eyes, but it's cause so much inconvenience for me since then. Probably a solid 4 or 5 hours on the phone and email talking to customer service agents, not to mention the massive frustration and annoyance. For people going to bat for the surveillance state, if that's your contribution to life, then I'm sorry you wasted yours (and made ours worse in the process).
The only thing I hate is when it sends it to one of the devices I do not have with me. I use iPhone and a few iPads. It seems to randomly send it to one of them. Also, my granddaughter sometimes gets them on her phone for google because she has an account on my PC. Other than that inconvenience it is fine for me. I don't know how it is any more of a surveillance profile than just logging in since they already have all of your information. They can already track every log in and transaction.
 
It connects your phone number with whatever profile you use for a given web service as well as your tracker cookies. And then after that, each time you use the 2FA you are confirming that is your phone number and you are still using it.
You gave them that number when you signed up. You're most likely to update that number for a banking type service anyway. You can do what I do, I have just use an old google voice number for most of these things and keep my private number private.
 
Last edited:
It connects your phone number with whatever profile you use for a given web service as well as your tracker cookies. And then after that, each time you use the 2FA you are confirming that is your phone number and you are still using it.

It's a good question and I'm glad there's some genuine interest. These are also questions Grok is pretty good at answering, so for anyone interested in why 2FA makes you less anonymous (in addition to being extremely inconvenient), now it's easier than ever to know why and how.
What? I think you have this backward. You don't give the website your phone number you enter it on paypals site. But most credit card payments do require you to enter your phone number on the actual site. Recommending using AI to research how to protect your digital identity is extremely weird.
 
I think what's crazy is that it's 2025 and some of you guys don't even understand this. This is literally how the largest companies in the world derive much or most of their revenue. Internet surveillance is a massive driver of the economy and it's all financed by our tax dollars.

And look at you guys throwing out the "tinfoil hat" like it's 2005. The fun thing about the internet is that you can't tell who's sincere or not, but honestly, I can't believe some people could be so naïve.
I understand it perfectly, I've worked in the industry for almost 30 years - it's you who seems to struggle with basic understanding of how websites work. But whatever mate, you do you I'm not here to educate or convince you otherwise.
 
I fucking hate two factor authentication, it's the worst. It exists so that companies can build a surveillance profile on users in the name of "security." When there was an astroturf campaign on the internet promoting it five or six years ago I just rolled my eyes, but it's cause so much inconvenience for me since then. Probably a solid 4 or 5 hours on the phone and email talking to customer service agents, not to mention the massive frustration and annoyance. For people going to bat for the surveillance state, if that's your contribution to life, then I'm sorry you wasted yours (and made ours worse in the process).

What a fucking nutjob. Whats PayPal gonna do with my phone number? Masturbate by looking at it? Who the fuck cares if they have my number, it has done absolutely 0 to my life except protect me from unauthorized access. Sell my info to the chinese? Brother everyh major company already sold and has your info, microsoft, sony, steam, google etc. The fact that youre on this very forum, your data is already there, hence the targeted ads. Relax, your life will be better if you dont give a shit, not like you can do anything about it. You're a nobody to all these corpos. If you live in the UK, NK or China, sucks for you, move out or you know, dont do illegal shit?
 
It connects your phone number with whatever profile you use for a given web service as well as your tracker cookies. And then after that, each time you use the 2FA you are confirming that is your phone number and you are still using it.

It's a good question and I'm glad there's some genuine interest. These are also questions Grok is pretty good at answering, so for anyone interested in why 2FA makes you less anonymous (in addition to being extremely inconvenient), now it's easier than ever to know why and how.

Why on Earth would I use my phone number? I use google authenticator for everything.

I guess PSN is ancient in this aspect and still requires phone for F2A...
 
It connects your phone number with whatever profile you use for a given web service as well as your tracker cookies. And then after that, each time you use the 2FA you are confirming that is your phone number and you are still using it.

It's a good question and I'm glad there's some genuine interest. These are also questions Grok is pretty good at answering, so for anyone interested in why 2FA makes you less anonymous (in addition to being extremely inconvenient), now it's easier than ever to know why and how.

No reason to use a phone number at all. Use the same email you use to log in for 2FA if you don't like giving out your phone number. It will email you a code and you use that instead. Or you can use the biometrics you use on your device. Or use an authenticator app. None of this requires you to provide your phone number.

Probably should have a go at Grok yourself about this stuff my man. Don't think you have the whole story here.

Why on Earth would I use my phone number? I use google authenticator for everything.

I guess PSN is ancient in this aspect and still requires phone for F2A...

PSN can use an authenticator app for 2FA.
 
Last edited:
No reason to use a phone number at all. Use the same email you use to log in for 2FA if you don't like giving out your phone number. It will email you a code and you use that instead. Or you can use the biometrics you use on your device. Or use an authenticator app. None of this requires you to provide your phone number.

Probably should have a go at Grok yourself about this stuff my man. Don't think you have the whole story here.



PSN can use an authenticator app for 2FA.

PSN supports both 2FA app + Passkeys now days.

Yep, just changed it. I think in 2023 or 2024 this option still wasn't there.
 
Password changed.

This tho is why this new wave of things like the online safety act are so fucking stupid. PayPal have pretty damn solid security yet they still get hacked, so why anyone thought it was a good idea to have tens of thousands of websites start requiring you to provide your photo ID's or passports, either with their own slapped together solutions or a myriad of third party solutions, none of which will be as remotely as secure as PayPal. All during a time of the most widespread and persistent state sponsored cyber warfare campaigns in history (that's also being super charged by ai).

The whole thing is a cyber security nightmare, leaving millions vulnerable to everything from identity theft to blackmail/kompromat.
 
I think what's crazy is that it's 2025 and some of you guys don't even understand this. This is literally how the largest companies in the world derive much or most of their revenue. Internet surveillance is a massive driver of the economy and it's all financed by our tax dollars.

And look at you guys throwing out the "tinfoil hat" like it's 2005. The fun thing about the internet is that you can't tell who's sincere or not, but honestly, I can't believe some people could be so naïve.
After reading these I wanted to write a similar response. I agree with you, the crazy thing is that after these recent crazy years we still have people that shout "cRaZy CoNsPiRacY thEoriST" for everything that they have no idea about, which is nowadays a choice. We have so much info freely available that if you are ignorant then it's only your fault. They must have Stockholm syndrome regarding their governments, media, corpos, etc. because I just can't find any reasonable explanation for such insane ignorance.
 
profusely. Infact, they're doing it right now.
Diana Prince Popcorn GIF
 


Guess it is time for me to just close my account. Already had taken out my credit card information due to the steam changes, but I guess it was for the better.

Good thing they closed my account when I didn't update my info. I'm glad they're getting this bad press.
 
Last edited:
I only had it to do business on GAF and receive my payouts from Twitch and YouTube. This is a sign to get rid of it. I can find an alternative, especially after the Steam BS.
 
Top Bottom