Live data from Hacker News

Show HN: Get a list of your Amazon purchases and see what you can sell them for

shelfflip.com

61–70 of 108 posts

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#61
post #54

When you sign up, your Amazon email and password are sent to server using GET and so are visible in the URL. While the request is done over HTTPS (and traffic snoopers can't see it), it is very likely that there are a ton of Amazon credentials lying around unencrypted in a log somewhere on their server. For some reason, the "Norton Secured" badge makes me less likely to trust the site and looking at the inline, not v…

I agree. The use of the Norton Secured badge made me quickly leave the site. A possible solution: There's a "Login with Amazon" service that may be what the developer needs to be using: http://login.amazon.com/

A/B testing showed that the Norton security badge is perceived positively. Does anyone have a different experience?

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#62
post #47

Earlier quoted context omitted.

Would it help you to know that Shelflip is secured by Norton secured and ex-Google Engineers?

No. You can put anything you want in text or graphics on the screen. You need to send people to a secure amazon.com login page and pass an OAuth token.

I agree. If my Amazon credentials are stolen, here's what I have at risk:

- My credit card details (multiple)

- Shipping / billing addresses

- My private order history 5+ years

- Access to all my AWS instances

- Amazon Cloud Drive data

- And I'm probably forgetting a few...

With that being said, even services like Mint.com require handing over your bank's password to them even today. It's really not a good practice even if they are stored securely.

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#63

Earlier quoted context omitted.

I am really sorry to hear that. We've experienced that once or twice before. This happens when the phone number associated with the account doesn't match the one you entered. Unfortunately, Amazon sometimes asks for an old phone number, as long as that number has at one point been associated with your account. ShelfFlip definitely doesn't do anything scammy.

I don't think you are, but if you were doing something scammy, would you _really_ admit to it?

haha I know... I just wanted to highlight that

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#64
post #54

Earlier quoted context omitted.

I agree. The use of the Norton Secured badge made me quickly leave the site. A possible solution: There's a "Login with Amazon" service that may be what the developer needs to be using: http://login.amazon.com/

A/B testing showed that the Norton security badge is perceived positively. Does anyone have a different experience?

I would guess that A/B testing against HN users would provide different results than the general population.

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#65
post #54

Earlier quoted context omitted.

I agree. The use of the Norton Secured badge made me quickly leave the site. A possible solution: There's a "Login with Amazon" service that may be what the developer needs to be using: http://login.amazon.com/

A/B testing showed that the Norton security badge is perceived positively. Does anyone have a different experience?

I can't speak broadly, only from my personal reaction. I also left the site after seeing the Norton logo (and before reading the comments here), because it seemed completely misplaced. I associate Norton with cleaning my computer of badware, not of whether or not some just-launched service is treating my data securely.

Because it seemed out of place, it felt like it was an obvious tactic to bootstrap trust where there wasn't any. A better icon (for me) would have been a badge from your SSL provider, or even just some well designed lock icon.

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#66

Not only would I echo the "give a website my Amazon creds" argument, but what if I want to sell things I haven't bought from Amazon and/or (like me) you don't really buy things on Amazon? I have lots of things I would like to sell and declutter, but none of them are from Amazon.

You can also sell products that you haven't bought on Amazon - if we show a price, then we are buying it (you can search for books / electronics here: www.shelfFlip.com/search.php).

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#67
post #24

I'm curious about the algorithm. Is there a ceiling for book prices? I seemed to get very similar results for multiple different types of books, including being offered $3.21 for one that sells for $100: http://www.amazon.com/gp/aw/d/0575066601?pc_redir=1405401886...

There is no ceiling in place (I need to look into why different books show similar results). For the mentioned book, there's a difference between for how much it is offered and for how much it is bought (if someone wants $100, it doesn't mean that anyone is buying it for that price) Scanning 44 other book-buying sites, only 3 are buying that book and the price is between $0.12 and $3.97

Makes sense. I didn't realize you had multiple sources, but I'm glad you do!

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#68
post #54

Earlier quoted context omitted.

I agree. The use of the Norton Secured badge made me quickly leave the site. A possible solution: There's a "Login with Amazon" service that may be what the developer needs to be using: http://login.amazon.com/

A/B testing showed that the Norton security badge is perceived positively. Does anyone have a different experience?

[deleted]

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#69

Earlier quoted context omitted.

A/B testing showed that the Norton security badge is perceived positively. Does anyone have a different experience?

I can't speak broadly, only from my personal reaction. I also left the site after seeing the Norton logo (and before reading the comments here), because it seemed completely misplaced. I associate Norton with cleaning my computer of badware, not of whether or not some just-launched service is treating my data securely. Because it seemed out of place, it felt like it was an obvious tactic to bootstrap trust where ther…

Very interesting point. The Norton batch is our SSL Batch (Symantec bought them or vice versa).

It seems like they need to do a better job of education users about that. I don't think they have a pure "Symantec SSL" batch anymore.

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#70

When you sign up, your Amazon email and password are sent to server using GET and so are visible in the URL. While the request is done over HTTPS (and traffic snoopers can't see it), it is very likely that there are a ton of Amazon credentials lying around unencrypted in a log somewhere on their server. For some reason, the "Norton Secured" badge makes me less likely to trust the site and looking at the inline, not v…

For the public at large, that badge is likely to increase trust, and certainly few outside the tech community are going to be concerned with poor JS.

disc: not implying you would disagree with any of the above.

Post reply on HN