Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Request your personal information

amazon.com

Post reply on HN
Print view View original

41–50 of 89 posts

Re: Request your personal information

#41

Post by WA »

cyode wrote: post #40
rsync wrote: post #22

I can't do this because amazon does not have my personal information. Amazon has a pseudonym with a dedicated Twilio number that delivers to a private postal box. I burn the pseudonym every few years. Which reminds me ... This is simple because VISA/MC do not validate cardholder name. Everyone thinks they do and most merchants believe that they do but ... they do not. You can use your card with "Mickey Mouse" and it…

My mind is blown. Reflecting on a lifetime of getting declined filling web forms in with a wrong CC number, billing address, expiration or CCV, I...don’t think I’ve ever misspelled my name. Trying this out on my next purchase for sure.

Fun fact (from 2012): some credit cards had more than one CCV. You could find out by simply trying all 1000 combinations on some web shops. Back then, I did security consulting and we knew a shop or two where it was possible to enumerate the CCVs without submitting an order and without being blocked.

Not sure if this is still valid nowadays, but it blew my mind as well.

Re: Request your personal information

#42

Post by mrfluffybeard »

sol_invictus wrote: post #24

> We will provide your information to you as soon as we can. Usually, this should not take more than a month. What benefit does Amazon get out of delaying giving out this information?

They don't have the data ready as this data is scattered across multiple ( maybe multiple dozen systems) . Also it might not be fully automated.

Re: Request your personal information

#43

Post by svennek »

Ansil849 wrote: post #12
svennek wrote: post #10

Please notice, at all companies (I don't know about AWS) that I have worked for each GDPR request eats up a few man-days of work internally. Some companies getting hit a lot by GDPR have likely automated it, but even a big company (that I know of) with 100k+ private customers (that all have the right) only receives a few requests a quarter, usually by angry customers.. This AWS thingy might not be GDPR, but it might…

> please consider if you wanna to be a resource hog.. Perhaps the corporations could also consider whether they want to be an information hog in the first place and slurp up people's data. You know what the easiest way to fulfill a data request is? To not have any data to give.

All data they process are required by law, but they have to collate a dozen systems manually and the legal department has to go thru everything and block out data the customer is not allowed to see (also by law)...

No all companies are evil and the GDPR has really made a significant change all the places I know of.

Re: Request your personal information

#44

Post by svennek »

svennek wrote: post #43
Ansil849 wrote: post #12

Earlier quoted context omitted.

> please consider if you wanna to be a resource hog.. Perhaps the corporations could also consider whether they want to be an information hog in the first place and slurp up people's data. You know what the easiest way to fulfill a data request is? To not have any data to give.

All data they process are required by law, but they have to collate a dozen systems manually and the legal department has to go thru everything and block out data the customer is not allowed to see (also by law)... No all companies are evil and the GDPR has really made a significant change all the places I know of.

Btw I am not speaking of a FAANG company, but one that has a tiny web presence..

Re: Request your personal information

#45

Post by captn3m0 »

WA wrote: post #41
cyode wrote: post #40

Earlier quoted context omitted.

My mind is blown. Reflecting on a lifetime of getting declined filling web forms in with a wrong CC number, billing address, expiration or CCV, I...don’t think I’ve ever misspelled my name. Trying this out on my next purchase for sure.

Fun fact (from 2012): some credit cards had more than one CCV. You could find out by simply trying all 1000 combinations on some web shops. Back then, I did security consulting and we knew a shop or two where it was possible to enumerate the CCVs without submitting an order and without being blocked. Not sure if this is still valid nowadays, but it blew my mind as well.

Even better fun fact: There’s some issuers that won’t validate your CVV at all, so any of the 999 options work for those cards.

Re: Request your personal information

#46

Post by sol_invictus »

mrfluffybeard wrote: post #42
sol_invictus wrote: post #24

> We will provide your information to you as soon as we can. Usually, this should not take more than a month. What benefit does Amazon get out of delaying giving out this information?

They don't have the data ready as this data is scattered across multiple ( maybe multiple dozen systems) . Also it might not be fully automated.

Doesn't make any sense, the computation time difference between pulling data from one system and fifty systems isn't measured in the months range.

Re: Request your personal information

#47

Post by joshSzep »

sol_invictus wrote: post #46
mrfluffybeard wrote: post #42

Earlier quoted context omitted.

They don't have the data ready as this data is scattered across multiple ( maybe multiple dozen systems) . Also it might not be fully automated.

Doesn't make any sense, the computation time difference between pulling data from one system and fifty systems isn't measured in the months range.

It makes a difference if it's just humans doing the job. Given the long window I would assume that this lacks automation

Re: Request your personal information

#48

Post by svennek »

riedel wrote: post #15
svennek wrote: post #10

Please notice, at all companies (I don't know about AWS) that I have worked for each GDPR request eats up a few man-days of work internally. Some companies getting hit a lot by GDPR have likely automated it, but even a big company (that I know of) with 100k+ private customers (that all have the right) only receives a few requests a quarter, usually by angry customers.. This AWS thingy might not be GDPR, but it might…

I would encourage people to do so for the exact reason. Personal data should be managed in a way that such requests can be processed. It is OK if it hurts a bit. It is the idea of the GDPR that companies establish scalable processes that allow things like requests, migration and deletion. The only thing you need to do is to verify that to the best of your knowledge it is complete. What should not happen is that compa…

Do you also check your grocery stores preparedness for fire for the same reason? Or your local banks preparedness for robbery? Hopefully not.

In business all decisions are made based on a risk tradeoff. Like people it never has enough money to do everything it wants.

Not all companies are started 12 months ago and hence cannot (by definition) do this right "from the beginning".

Also some businesses have a requirement (bound by law) and a wish (bound by corporate secrets) of not disclosing too much information. That cannot be easily automated.

Also, all the costs of that just goes to the other customers, so thank you.

Btw. I am not pro facebook(meta)/amazon/spamhosts/ai-driven web3.0 sell-your-customers-data... etc.. I talk about regular, honest businesses that two decades ago had no web presence but have it now and for some reason or another need to handle your data..

Re: Request your personal information

#49

Post by svennek »

antris wrote: post #16
svennek wrote: post #10

Please notice, at all companies (I don't know about AWS) that I have worked for each GDPR request eats up a few man-days of work internally. Some companies getting hit a lot by GDPR have likely automated it, but even a big company (that I know of) with 100k+ private customers (that all have the right) only receives a few requests a quarter, usually by angry customers.. This AWS thingy might not be GDPR, but it might…

> Just because it is free and your right, please consider if you wanna to be a resource hog.. Oh poor Amazon and Bezos... They must be struggling on the resources. Please think twice about exercising your legal right, as it might affect the profit margins of a monopolistic megacorp.

Rather, poor other customers, as companies always shifts added costs to the customer base..

Re: Request your personal information

#50

Post by sol_invictus »

joshSzep wrote: post #47
sol_invictus wrote: post #46

Earlier quoted context omitted.

Doesn't make any sense, the computation time difference between pulling data from one system and fifty systems isn't measured in the months range.

It makes a difference if it's just humans doing the job. Given the long window I would assume that this lacks automation

Yes, but "having a human in the system" isn't answering the original question: what does Amazon benefit from introducing excess cost into this equation? Surely there should be nothing clandestine in your own usage data, search queries etc.
Post reply on HN