Thanks FedEx, this is why we keep getting phished • Hacker News Board

Re: Thanks FedEx, this is why we keep getting phished

#491

Post by bigstrat2003 » Fri, Feb 23, 2024, 11:56 PM UTC

bsimpson wrote: post #415

habosa wrote: post #219

FedEx may have the worst and least secure digital platform for a major company. Some examples I’ve noticed: 1. I moved into a 10-unit apartment building and wanted to set up FedEx Delivery Manager. I just put in my new address, no verification whatsoever, and I was immediately given access to the previous tenant’s delivery instructions which included the buildings private garage code. Any thief could have done the sa…

You're reminding me of the time I realized that Schwab (a massive American bank/broker) truncated all passwords to 8 characters.

PayPal used to do the same thing, but even worse they weren't consistent about it. The page to create your password truncated it, but the login page did not. I found out the hard way when I couldn't log in because of that stupid behavior.

Thankfully they fixed it at some point, but it's absolutely mind blowing to me that anyone thought it was acceptable in the first place.

Re: Thanks FedEx, this is why we keep getting phished

#492

Post by Libcat99 » Fri, Feb 23, 2024, 11:56 PM UTC

windthrown wrote: post #489

eastbound wrote: post #396

Earlier quoted context omitted.

Can you file a small-claims? You have nothing to lose, it’s not like they could threaten to stop delivering your packages.

Why couldn't they threaten to stop delivering? I was under the impression that only the Postal Service (USPS) had a regulatory mandate to serve all US addresses.

I think they'd be unlikely to since you are not the one purchasing shipping, the shipper is.

Re: Thanks FedEx, this is why we keep getting phished

#493

Post by jcotton42 » Fri, Feb 23, 2024, 11:57 PM UTC

bastardoperator wrote: post #445

zamalek wrote: post #320

Earlier quoted context omitted.

I assume you know that you can open a claim? They'll either find your package really fast, or will have to pay its full value. Often the vendor has to initiate the claim. If the vendor doesn't want to open a claim, refund. If the vendor doesn't want to refund, chargeback.

My last two stolen packages required the vendor to open a claim, I did in both cases and both vendors refunded me. Fedex wouldn't even entertain trying to help me.

I had this with an Apple Watch return. The package was either lost or stolen in transit, and neither FedEx nor Apple were interested in helping me. Only got it resolved after emailing Tim Cook's address, which goes to executive customer relations.

Re: Thanks FedEx, this is why we keep getting phished

#494

Post by carom » Fri, Feb 23, 2024, 11:57 PM UTC

gopher_space wrote: post #386

zdragnar wrote: post #341

Earlier quoted context omitted.

Strangely, I've had perishable medicine delivered to me (a biologic injection) for two years without a single hiccup by FedEx. They have been the most consistently reliable delivery service where I live (though the post office is pretty good too). My house is at the bottom of a hill that is difficult for rear wheel drive vehicles in winter. UPS, on the other hand, can go pound sand. They often refuse to deliver due t…

> They have been the most consistently reliable delivery service where I live (though the post office is pretty good too). Every service relies on the USPS to some extent, which makes the Republican attempt to gut the organization so baffling. There's no replacement and nobody is looking to replace it. From my perspective as an ex letter carrier, your personal experience with package delivery is determined almost ent…

I live in an apartment. I get mail for 4 or 5 previous tenants. I get corporate spam. I have unsubscribed from as much as I can, I have a return to sender stamp and have used it, yet I am inundated with trash on a daily basis. Technically, it is illegal for me to throw out this trash. In my opinion there is a massive amount of waste moving through USPS and the organization could use some serious cuts in order to take stock of what actually needs to be delivered.

Re: Thanks FedEx, this is why we keep getting phished

#495

Post by Moru » Sat, Feb 24, 2024, 12:17 AM UTC

gffrd wrote: post #429

zdragnar wrote: post #341

Earlier quoted context omitted.

Strangely, I've had perishable medicine delivered to me (a biologic injection) for two years without a single hiccup by FedEx. They have been the most consistently reliable delivery service where I live (though the post office is pretty good too). My house is at the bottom of a hill that is difficult for rear wheel drive vehicles in winter. UPS, on the other hand, can go pound sand. They often refuse to deliver due t…

It's almost as if they're giant companies employing thousands of people, and quality varies across geography …

This is what is so baffling with people.

"The $company/government isn't doing their job, we need to fire/change government/privatise this function, it would solve everything!"

Well, where do you think the former employees will work after their previous employer shuts down? It's not the form of government/company culture that is the biggest problem I'm affraid.

Re: Thanks FedEx, this is why we keep getting phished

#496

Post by Tommah » Sat, Feb 24, 2024, 12:24 AM UTC

Rudism wrote: post #245

A while ago my wife applied for a home equity loan. At some point I got a call from someone claiming to be from the bank she had applied through (I forget which one), calling to make sure I approved the loan since the home is in both our names. He asked for my name, which I gave him, and then the last four digits of my social security number, which I also gave him. He then proceeded to ask for my full social security…

One of my startup jobs paid us through ADP. While our ADP account was being set up, my boss told us to be on the lookout for an email from them. So one day, I'm in the middle of programming something, and I check my email. Lo and behold, there is an email from ADP... or is it? It is about fifty words long and contains five grammatical errors. It's asking me to fill out the attached PDF and email it back. The PDF is asking for my full name, address, phone number, SSN, and so on. I figure this may be some kind of phishing attempt, so I ignore it and get back to my work. If it's real, I'll hear about it again, right? Well, two weeks later, my boss tells me amazedly, "Hey, Bill from ADP is still waiting for your information! Why didn't you reply to him?!?!" I laughed and told him why.

As a bonus, when I was finally put into the system, they managed to get my zip code, phone number, and SSN wrong. At ADP, quality is job zero.

Re: Thanks FedEx, this is why we keep getting phished

#497

Post by zten » Sat, Feb 24, 2024, 12:44 AM UTC

quatrefoil wrote: post #477

denkmoon wrote: post #461

Earlier quoted context omitted.

The mailbox? On your property? that you paid for an installed (or bought off the previous owner), is government/usps property and they'll steal a parcel that someone else has delivered to it? That's insane lmao

USPS owns and maintains some cluster mailboxes at apartment complexes and HOAs.

No, it goes further than that, all the way back to 1934. USPS is the only authorized service to use a mailbox. Here is an altogether far too detailed study of the law: https://www.gao.gov/assets/ggd-97-85.pdf

You need separate bins/boxes/whatever for other services to use.

Re: Thanks FedEx, this is why we keep getting phished

#498

Post by gopher_space » Sat, Feb 24, 2024, 12:48 AM UTC

carom wrote: post #494

gopher_space wrote: post #386

Earlier quoted context omitted.

> They have been the most consistently reliable delivery service where I live (though the post office is pretty good too). Every service relies on the USPS to some extent, which makes the Republican attempt to gut the organization so baffling. There's no replacement and nobody is looking to replace it. From my perspective as an ex letter carrier, your personal experience with package delivery is determined almost ent…

I live in an apartment. I get mail for 4 or 5 previous tenants. I get corporate spam. I have unsubscribed from as much as I can, I have a return to sender stamp and have used it, yet I am inundated with trash on a daily basis. Technically, it is illegal for me to throw out this trash. In my opinion there is a massive amount of waste moving through USPS and the organization could use some serious cuts in order to take…

You've done everything except talk to the one human being involved who appears at your residence every single day. If I was your letter carrier and knew you felt this way I'd honestly be hurt that you didn't bother to ask me about any of it.

> the organization could use some serious cuts

Miss the part about them being the backbone of package delivery in this country? Or the part where there's nobody to replace them? Well it doesn't matter since the USPS is financially self-sustaining.

Re: Thanks FedEx, this is why we keep getting phished

#499

Post by Aeolun » Sat, Feb 24, 2024, 12:54 AM UTC

deedub wrote: post #332

zamalek wrote: post #320

Earlier quoted context omitted.

I assume you know that you can open a claim? They'll either find your package really fast, or will have to pay its full value. Often the vendor has to initiate the claim. If the vendor doesn't want to open a claim, refund. If the vendor doesn't want to refund, chargeback.

Be careful about those chargebacks. I bought two new pixel phones directly from Google and only one arrived. Google support was of course awful and Fedex did absolutely nothing outside of asking me what color the phone was. lol I ended up reversing charges for the missing phone and Google immediately wrecked me - I was using Fi at the time so they killed my cell service and killed my ability to use Google Pay for any…

I think it’s fair to say you should do chargebacks only to companies you won’t do business with any more.

Re: Thanks FedEx, this is why we keep getting phished

#500

Post by hypercube33 » Sat, Feb 24, 2024, 12:55 AM UTC

habosa wrote: post #219

FedEx may have the worst and least secure digital platform for a major company. Some examples I’ve noticed: 1. I moved into a 10-unit apartment building and wanted to set up FedEx Delivery Manager. I just put in my new address, no verification whatsoever, and I was immediately given access to the previous tenant’s delivery instructions which included the buildings private garage code. Any thief could have done the sa…

Up until a few years (well, it feels like it) ago wells Fargo had a case insensitive password for accounts. I didn't believe it since my password was upper and lower case and special characters but I tried one day and sure enough got right in.