Show HN: Get a list of your Amazon purchases and see what you can sell them for • Hacker News Board

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#101

Post by SethKinast » Wed, Jul 23, 2014, 2:57 AM UTC

I can't believe anyone would put their Amazon password into a third-party site. I clicked on the link, started through the login funnel, realized what I was about to do, and stopped.

When I got the "Are you sure?" message, I started thinking that the site was specifically crafted to show how easy it is to get people to give passwords to a "reputable-looking" third party.

I expected to get some sort of congratulatory message after saying no, like "You're smart enough to not give us your password!" When I didn't get that, I came back to the HN comments, expecting to see an explanation from OP about this proof of concept.

Then I see it's supposed to be a real site. Well then.

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#102

Post by sunyata » Wed, Jul 23, 2014, 2:58 AM UTC

toomuchtodo wrote: post #96

sahaskatta wrote: post #62

Earlier quoted context omitted.

I agree. If my Amazon credentials are stolen, here's what I have at risk: - My credit card details (multiple) - Shipping / billing addresses - My private order history 5+ years - Access to all my AWS instances - Amazon Cloud Drive data - And I'm probably forgetting a few... With that being said, even services like Mint.com require handing over your bank's password to them even today. It's really not a good practice e…

Tried Shelfflip, minutes later received this email from Amazon: "Your Amazon.com password has been changed" This is an important message from Amazon.com. As a precaution, we've reset your Amazon.com password because you may have been subject to a "phishing" scam. Here's how phishing works: A scam artist sends an e-mail, which is designed to look like it came from a reputable company such as a bank, financial institut…

Oh yeah - I checked it out before reading the comments here. Stupidly. Sleep deprivation sucks for cognition.

Got the same exact email...

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#103

Post by mcfunley » Wed, Jul 23, 2014, 3:05 AM UTC

gnu8 wrote: post #47

bearbin wrote: post #4

This seems like a cool idea, but I don't feel comfortable giving out my Amazon credentials with no guarantee of how they are used.

Would it help you to know that Shelflip is secured by Norton secured and ex-Google Engineers?

How many ex-google engineers are there? Tens of thousands? They can't all be any good.

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#104

Post by xur17 » Wed, Jul 23, 2014, 3:07 AM UTC

Great idea! I'm guessing you're checking the resale price on Amazon, and giving a price based on that?

I got frustrated with the process of listing / selling items on Amazon (I imagine a lot of it could be automated), and looked around for a service like this (and then added it to my 'side-project' idea list).

I'll give it a shot next time I get rid of stuff.

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#105

Post by vermooten » Wed, Jul 23, 2014, 11:24 AM UTC

yeah right, I'm totally going to give you my credentials. You from Nigeria by any chance?

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#106

Post by Corrado » Wed, Jul 23, 2014, 2:34 PM UTC

ChristianKletzl wrote: post #43

sliverstorm wrote: post #36

Earlier quoted context omitted.

Also highly risky is AWS. Maybe an attacker can't order diamond rings for themselves, but they certainly could spin up a million EC2 instances to mine bitcoin. The cost efficiency is terrible of course, but what do they care.

We haven't tested that, but I highly recommend (regardless of using ShelfFlip) to use "Multi-Factor Authentication" for AWS.

While MFA is a great idea and I highly recommend it, it doesn't do anything to prevent API access. :(

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#107

Post by dgurson » Wed, Jul 23, 2014, 3:35 PM UTC

Thank you for taking the hassle out of reselling my items. I think this is a great idea!

Re: Show HN: Get a list of your Amazon purchases and see what you can sell them for

#108

Post by J3ff0 » Wed, Jul 23, 2014, 11:38 PM UTC

mileswu wrote: post #9

ChristianKletzl wrote: post #6

Earlier quoted context omitted.

Is there anything we could do to make you (and many more with the same sentiment) more comfortable? We are thinking of writing a blog post of what happens in the background would that help? Any other ideas?

Just an off-the-top-of-my-head idea: Could you give people a bookmarklet or an extension that they can run when they are on their order history page that exports all the Amazon product IDs?

You can actually download your entire order history as a CSV (which is kind of fun -- on the account page, find "Download Order Reports"), which could then be uploaded into this service to get a report on everything you've purchased. The only sensitive information included in the report is name and address.