Today my paypal was hacked, no harm done, i saw it, noticed paypal, they will investigate and revert the
transaction. I should know better, as an IT person with security background... Many times we are confronted
with websites being hacked, username/password being stolen and then used on other services..

It might have been LinkedIn, Yahoo, or a new compromised site, i don't know.
The thing is, they went into my account and made a payment.

Paypal refused to provide more details (IP Address / Country).

The lesson learned : keep different passwords for all sites and change them regularly...
It is a hazzle and a burden, but it keeps you safe...

I read Hacker News
https://news.ycombinator.com/

Frequently there are security related discussions by some of the best and brightest. I know you know about this but others might not.


Sent from my iPhone using NexusFi futures trading

rleplae 

Today my paypal was hacked, no harm done, i saw it, noticed paypal, they will investigate and revert the transaction. I should know better, as an IT person with security background... Many times we are confronted with websites being hacked, username/password being stolen and then used on other services.. It might have been LinkedIn, Yahoo, or a new compromised site, i don't know. The thing is, they went into my account and made a payment. Paypal refused to provide more details (IP Address / Country). The lesson learned : keep different passwords for all sites and change them regularly... It is a hazzle and a burden, but it keeps you safe...

Yikes sorry to hear that. Did you use a strong and unique password for PayPal? I use a password manager, so every login to every site is a very strong and unique password.

I also suggest enabling 2FA (two factor authentication) on email accounts, to prevent unauthorized use. In many cases, access to your email will grant them access to most any other service you subscribe to, in the way of password reset requests.

PayPal also offers 2FA directly.

Mike

Big Mike 

Yikes sorry to hear that. Did you use a strong and unique password for PayPal? I use a password manager, so every login to every site is a very strong and unique password. I also suggest enabling 2FA (two factor authentication) on email accounts, to prevent unauthorized use. In many cases, access to your email will grant them access to most any other service you subscribe to, in the way of password reset requests. PayPal also offers 2FA directly. Mike

No big harm done, the account was sleeping for some time, so they first tried 10$, i received the receipt by mail and got into alert/scramble mode, calling Paypal helpdesk, they blocked it immediately.

But it's a warning i should revisit all my stuff.

Is there a password manager you can advice ?
Is it easy to use on more than one machine ?
I am familiar with the mechanism, but haven't researched the best tool

I highly recommend Keepass. You can find a free app for every platform - every phone OS and every computer-based OS. You just set it up on one machine then copy the keepass database to all the others when you make changes. I couldn't tell you the passwords to any of my accounts, they are all long and extremely complicated. I only remember one, the one for the database.

Good luck in your search.

P.S. - Coincidentally, BofA contacted me today that my debit card was used in another state. You see, if they can't hack your password they find another way!