After giving this a try, I got an email from Amazon saying they've reset my password because I "may have been subject to a 'phishing' scam".
Show HN: Get a list of your Amazon purchases and see what you can sell them for
31–40 of 108 posts
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#32Earlier quoted context omitted.
There is absolutely nothing you could say or do that would make me give you my password. Also, I assume, you need to store it in the clear to use it. You claim to not have access to credit card information or being able to order something, but I already have to trust you to believe that claim. Also, Amazon could change their policies at any time -- after all you have credentials, Amazon could decide to trust you.
You could definitely verify that claim: 1) Try to extract your credit card from your account 2) Order something to a new address without having to verify your credit card. You will find that both are not possible
Try to extract your credit card from your account
I am not foolish enough to believe that my attackers are no more clever than myself. So whether I can extract my credit card from my account is not useful.
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#33This seems like a cool idea, but I don't feel comfortable giving out my Amazon credentials with no guarantee of how they are used.
Amazon already has an OAuth solution: http://login.amazon.com
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#34Earlier quoted context omitted.
Agreed. My understanding is that having your password does not necessarily allow someone to see your CC number or order things on your behalf through Amazon, but it definitely does not seem like a best practice to go around handing out one's Amazon password. This sort of thing sounds like a good argument, though, for Amazon's implementing the sort of fine-grained permissions (in conjunction with a federated authentic…
I wish Amazon would implement this. We see them visiting our site a lot. If you read this, dear Amazon employee, please implement :)
It's in progress: http://login.amazon.com
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#35I'm curious about the algorithm. Is there a ceiling for book prices? I seemed to get very similar results for multiple different types of books, including being offered $3.21 for one that sells for $100: http://www.amazon.com/gp/aw/d/0575066601?pc_redir=1405401886...
There is no ceiling in place (I need to look into why different books show similar results). For the mentioned book, there's a difference between for how much it is offered and for how much it is bought (if someone wants $100, it doesn't mean that anyone is buying it for that price)
Scanning 44 other book-buying sites, only 3 are buying that book and the price is between $0.12 and $3.97
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#36This seems like a cool idea, but I don't feel comfortable giving out my Amazon credentials with no guarantee of how they are used.
Agreed. My understanding is that having your password does not necessarily allow someone to see your CC number or order things on your behalf through Amazon, but it definitely does not seem like a best practice to go around handing out one's Amazon password. This sort of thing sounds like a good argument, though, for Amazon's implementing the sort of fine-grained permissions (in conjunction with a federated authentic…
Also highly risky is AWS. Maybe an attacker can't order diamond rings for themselves, but they certainly could spin up a million EC2 instances to mine bitcoin.
The cost efficiency is terrible of course, but what do they care.
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#37This is a really good idea! I'd say Amazon isn't the only place I buy stuff, so adding places like Target, IKEA, etc. would be great!
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#38After giving this a try, I got an email from Amazon saying they've reset my password because I "may have been subject to a 'phishing' scam".
I am really sorry to hear that. We've experienced that once or twice before. This happens when the phone number associated with the account doesn't match the one you entered. Unfortunately, Amazon sometimes asks for an old phone number, as long as that number has at one point been associated with your account. ShelfFlip definitely doesn't do anything scammy.
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#39This seems like a cool idea, but I don't feel comfortable giving out my Amazon credentials with no guarantee of how they are used.
Amazon already has an OAuth solution: http://login.amazon.com
Unfortunately, this only works as a login mechanism comparable to facebook, but doesn't give a site access to your past purchases.
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#40Earlier quoted context omitted.
Is there anything we could do to make you (and many more with the same sentiment) more comfortable? We are thinking of writing a blog post of what happens in the background would that help? Any other ideas?
I'm not sure, but Mint.com seems like a good place to look for ideas. They have somehow persuaded me and millions of others to hand over all our banking passwords. Gaining this trust, though, will probably not be easy. One advantage a site like Mint has is that they have so much content and so many partnerships that it is clear they are not a scam, have enough at stake to not misuse my information, and probably have…
Mint also at least initially partnered with Yodlee, and didn't actually doing any of the storing of your passwords themselves.