...and in 10 minutes someone will have programmed a bot to try all Amazon accounts and the phrase "Fark_Amazon" along with the numbers "1234".

TheCheese: ...and in 10 minutes someone will have programmed a bot to try all Amazon accounts and the phrase "Fark_Amazon" along with the numbers "1234".

DAMNIT

Weird. That's the same "technology" that powers most working girl transactions: "how much?" followed by a 4-digit room number.

...

Or so I hear.

How is this less secure than entering your email address and password? That's only two variables also.

That's PIN number, Subs.

/pet peave

FTA:

"Best of all, it's not PayPal. It's linked to your credit card so if something goes wrong with your transaction, you actually have a prayer of getting your money back."

I spent 300$ on facebook games and the like because I'm an idiot. Anyways paypal returned the money within 4 days.

toddalmighty: That's PIN number, Subs.

/pet peave

Personal Identification Number number?

Choadzilla: toddalmighty: That's PIN number, Subs.

/pet peave

Personal Identification Number number?

Ha ha! Todd's a dumbass!

toddalmighty: That's PIN number, Subs.

/pet peave

It's your pet peeve to be grammatically incorrect?

Man, someone must've chummed the waters, looks like they're biting at anything today.

paypal rules

Several people in this thread need new batteries in their sarcasm and meme detectors.

toddalmighty: 10/10. Simple, with just a whiff of snark, and you've already caught your limit.

toddalmighty: That's PIN number, Subs.

/pet peave

I almost almost did that, just because I knew it would set off the usual shiatstorm. I salute you for taking the reigns.

Or, you could, you know, enter your credit card and store it in an account then you can buy things in a single click.

it's what I do!

I don't understand how this is supposed to work, nor do I understand how I'm supposed to buy from Amazon without logging in to their site.

open sesame
hot jugs
edible panties
damn wife
damn husband
lying bastard
fat pig
farking jerk
farking pig
farking idiot
kindle sux
drew curtis
secret muslin

Eh, you'll get over it.

Just bought from amazon using payphrase so I'm getting a kick out of my id being stolen..

This seems like it would be even easier to brute force than username + password. The phrase is likely going to be two English words, coupled to only 10000 possible PINs. Am I missing something that would prevent this?

Space Odyssey 2001
Beverly Hills 9021
Christopher Columbus 1492
Pennsylvania Avenue 1600
Jennys Number 5309
Hastings Battle 1066
Star Trek 1701
Sarah Palin 2012
My Pin 1234

Alien Robot: Sarah Palin 2012

I bet this one will net about ten thousand or so stolen accounts.

Pennsylvania Six 5000

asdf jkl; 1234

FArK, amazone is getting better, but I just ordered something last week. The supplier e-mailed me requesting a valid ship to address. You know, out here in the sticks our addresses aren't mapped yet. Maybe in teh 22nd century. Anyway, I e-mail back asking how they're going to ship and providing the appropriate addresses. Then this week they say they need the same info. I e-mail back their previous e-mail and my response, and nothing. I e-mail them today asking status of order, and they e-mail back that they need a valid address to ship to. How about telling me how you're going to ship it muther f ers.

If I understand this properly it sounds like a really bad idea. According to the Amazon site each PayPhrase is unique, so it's basically like an odd username. The kicker is that they make you use a 4 digit pin with it.

This means that I can find a PayPhrase that's in use and try 10^4 combinations to crack it? Even with rate limiting that isn't many...

I guess maybe they're counting on the predetermined shipping address to stop crackers from targeting this service, but I could easily see kids doing it just to screw with people. Soon a lot of Amazon customers are going to have bulk boxes of vibrators showing up on their doorsteps..

Space Balls 1234(5)

/the Schwartz is strong with these guys

I tried this from a Fark thread: "never waddling you are the bad kind of bird". It was already taken.

Somebody try "George Lucas" and "1138". You won't get free stuff, but somebody is going to have some 'splaining to do when this shows up. (new window)

Van Halen 5150

^^^^^^

So, basically I just need to come up with three more numbers, is that right?

Milk Force 0009

1234? That's the same number as the combination on my luggage!

i've got dibs on blow job 6969

Kierkegaard's Pseudonym: I bet this one will net about ten thousand or so stolen accounts.

You really think Amazon is stupid enough to allow the product to be shipped to a location other than the billing address?

BraveNewCheneyWorld: Kierkegaard's Pseudonym: I bet this one will net about ten thousand or so stolen accounts.

You really think Amazon is stupid enough to allow the product to be shipped to a location other than the billing address?

Well, considering I have shipped Christmas/birthday gifts to addresses that weren't my own, I would say...yes.

The English Major: Well, considering I have shipped Christmas/birthday gifts to addresses that weren't my own, I would say...yes.

The point of this is so you don't have to be logged in to order, you seem to think this is identical to a "full account access" login, which is not the case.

codewerdna: FTA:

"Best of all, it's not PayPal. It's linked to your credit card so if something goes wrong with your transaction, you actually have a prayer of getting your money back."

I spent 300$ on facebook games and the like because I'm an idiot. Anyways paypal returned the money within 4 days.

You did what now? Doesn't really matter I guess because whatever it is, you're doing it wrong.

BraveNewCheneyWorld: The English Major: Well, considering I have shipped Christmas/birthday gifts to addresses that weren't my own, I would say...yes.

The point of this is so you don't have to be logged in to order, you seem to think this is identical to a "full account access" login, which is not the case.

I stand corrected.

Choadzilla: Personal Identification Number number?

Slug2468: Ha ha! Todd's a dumbass!

codewerdna: It's your pet peeve to be grammatically incorrect?

It's a triple-reverse rotsky. Such a troll has never been successfully executed on Fark before.

My hat's off to you sir...

(Just Google rotsky. You'll understand)

I don't think anybody has mentioned it but the payphrase is locked to a destination address along with a billing account. So if someone did steal your payphrase and PIN, whatever they ordered would be sent to you.

AZtoJapan: I don't think anybody has mentioned it but the payphrase is locked to a destination address along with a billing account. So if someone did steal your payphrase and PIN, whatever they ordered would be sent to you.

A roll of duct tape, a box of Hefty garbage bags, a hacksaw, a shovel, a bag of lyme, and 1 copy (each) of Barry R. Bodde's How to Divorce my Cheating Wife and Louis A. Case's How to Represent Yourself in Court.

The English Major: toddalmighty: That's PIN number, Subs.

/pet peave

I almost almost did that, just because I knew it would set off the usual shiatstorm. I salute you for taking the reigns rains.

I can't beleive an English Major would make such a simple mistake.

Xaneidolon: The English Major: toddalmighty: That's PIN number, Subs.

/pet peave

I almost almost did that, just because I knew it would set off the usual shiatstorm. I salute you for taking the reigns rains.

I can't beleive an English Major would make such a simple mistake.

What you did their, I see it.

I am Ahab: Xaneidolon: The English Major: toddalmighty: That's PIN number, Subs.

/pet peave

I almost almost did that, just because I knew it would set off the usual shiatstorm. I salute you for taking the reigns rains.

I can't beleive an English Major would make such a simple mistake.

What you ewe did their, I see sea it.

Geez, people.

codewerdna: FTA:

"Best of all, it's not PayPal. It's linked to your credit card so if something goes wrong with your transaction, you actually have a prayer of getting your money back."

I spent 300$ on facebook games and the like because I'm an idiot. Anyways paypal returned the money within 4 days.

I don't think you're an idiot. Can I have some money?

BraveNewCheneyWorld: Kierkegaard's Pseudonym: I bet this one will net about ten thousand or so stolen accounts.

You really think Amazon is stupid enough to allow the product to be shipped to a location other than the billing address?

They already do this. I have two billing addresses on file for two separate cards, and send things to as many as four different addresses - including outside the US.

Nogale: BraveNewCheneyWorld: Kierkegaard's Pseudonym: I bet this one will net about ten thousand or so stolen accounts.

You really think Amazon is stupid enough to allow the product to be shipped to a location other than the billing address?

They already do this. I have two billing addresses on file for two separate cards, and send things to as many as four different addresses - including outside the US.

That's not how this would work though, presumably. I imagine for each two word and four number combination, it will ship to one and only one address.

George Orwell 1984