Originally Posted By: artie505
so I guess the 21st is not an error, but why, then, was a password changing scheme that was considered secure on the 21st - the one you initially used - changed, and why the backtracking from the earlier caveat that passwords should be changed after the 21st, presumably to take advantage of the new scheme? confused

Allowing ample time to be sure the new security system to be installed, tested, and cut over to? Perhaps the install went better than expected and the system was actually up on the 21st?

Originally Posted By: artie505
Edit: Granted that the new scheme may be more secure than the old one, but it's overkill if the old one was considered secure.

System that were considered secure even a month, or even a week ago have been broken and the software to break them is widely available for licensing on the internet. The writers of the security breaking software have been known to have a "fix" on line just a few days after a new security system is released. So what was secure may no longer be secure, and what is secure today may not be secure by tomorrow morning. Some very smart programmers are making millions of dollars/rubles/Euros/etc. producing and licensing security defeating algorithms to thousands or even tens of thousands of less capable malefactors around the world.

Originally Posted By: artie505
Window-dressing?

If it is window dressing then eBay is inviting law suits from everyone who logs onto their system. It could easily put them out of business.



"All you've got to do is own up to your ignorance
honestly, and you'll find people who are eager to
fill your head with information"
--Walt Disney