When you sign up, your Amazon email and password are sent to server using GET and so are visible in the URL. While the request is done over HTTPS (and traffic snoopers can't see it), it is very likely that there are a ton of Amazon credentials lying around unencrypted in a log somewhere on their server. For some reason, the "Norton Secured" badge makes me less likely to trust the site and looking at the inline, not v…
I agree. The use of the Norton Secured badge made me quickly leave the site. A possible solution: There's a "Login with Amazon" service that may be what the developer needs to be using: http://login.amazon.com/
Show HN: Get a list of your Amazon purchases and see what you can sell them for
61–70 of 108 posts
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#62Earlier quoted context omitted.
Would it help you to know that Shelflip is secured by Norton secured and ex-Google Engineers?
No. You can put anything you want in text or graphics on the screen. You need to send people to a secure amazon.com login page and pass an OAuth token.
- My credit card details (multiple)
- Shipping / billing addresses
- My private order history 5+ years
- Access to all my AWS instances
- Amazon Cloud Drive data
- And I'm probably forgetting a few...
With that being said, even services like Mint.com require handing over your bank's password to them even today. It's really not a good practice even if they are stored securely.
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#63Earlier quoted context omitted.
I am really sorry to hear that. We've experienced that once or twice before. This happens when the phone number associated with the account doesn't match the one you entered. Unfortunately, Amazon sometimes asks for an old phone number, as long as that number has at one point been associated with your account. ShelfFlip definitely doesn't do anything scammy.
I don't think you are, but if you were doing something scammy, would you _really_ admit to it?
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#64Earlier quoted context omitted.
I agree. The use of the Norton Secured badge made me quickly leave the site. A possible solution: There's a "Login with Amazon" service that may be what the developer needs to be using: http://login.amazon.com/
A/B testing showed that the Norton security badge is perceived positively. Does anyone have a different experience?
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#65Earlier quoted context omitted.
I agree. The use of the Norton Secured badge made me quickly leave the site. A possible solution: There's a "Login with Amazon" service that may be what the developer needs to be using: http://login.amazon.com/
A/B testing showed that the Norton security badge is perceived positively. Does anyone have a different experience?
Because it seemed out of place, it felt like it was an obvious tactic to bootstrap trust where there wasn't any. A better icon (for me) would have been a badge from your SSL provider, or even just some well designed lock icon.
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#66Not only would I echo the "give a website my Amazon creds" argument, but what if I want to sell things I haven't bought from Amazon and/or (like me) you don't really buy things on Amazon? I have lots of things I would like to sell and declutter, but none of them are from Amazon.
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#67I'm curious about the algorithm. Is there a ceiling for book prices? I seemed to get very similar results for multiple different types of books, including being offered $3.21 for one that sells for $100: http://www.amazon.com/gp/aw/d/0575066601?pc_redir=1405401886...
There is no ceiling in place (I need to look into why different books show similar results). For the mentioned book, there's a difference between for how much it is offered and for how much it is bought (if someone wants $100, it doesn't mean that anyone is buying it for that price) Scanning 44 other book-buying sites, only 3 are buying that book and the price is between $0.12 and $3.97
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#68Earlier quoted context omitted.
I agree. The use of the Norton Secured badge made me quickly leave the site. A possible solution: There's a "Login with Amazon" service that may be what the developer needs to be using: http://login.amazon.com/
A/B testing showed that the Norton security badge is perceived positively. Does anyone have a different experience?
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#69Earlier quoted context omitted.
A/B testing showed that the Norton security badge is perceived positively. Does anyone have a different experience?
I can't speak broadly, only from my personal reaction. I also left the site after seeing the Norton logo (and before reading the comments here), because it seemed completely misplaced. I associate Norton with cleaning my computer of badware, not of whether or not some just-launched service is treating my data securely. Because it seemed out of place, it felt like it was an obvious tactic to bootstrap trust where ther…
It seems like they need to do a better job of education users about that. I don't think they have a pure "Symantec SSL" batch anymore.
Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for
#70When you sign up, your Amazon email and password are sent to server using GET and so are visible in the URL. While the request is done over HTTPS (and traffic snoopers can't see it), it is very likely that there are a ton of Amazon credentials lying around unencrypted in a log somewhere on their server. For some reason, the "Norton Secured" badge makes me less likely to trust the site and looking at the inline, not v…
disc: not implying you would disagree with any of the above.