If you can read this, either the style sheet didn't load or you have an older browser that doesn't support style sheets. Try clearing your browser cache and refreshing the page.
Fark SearchWeb Fark

         more options... Create account

(The Consumerist) Fail Amazon launches new "PayPhrase" technology, which lets you buy a product by entering two words and a four-digit PIN. I'm sure this'll go over well   (consumerist.com) divider line 47
More: Fail, PayPal  
•       •       •

3040 clicks; posted to Business » on 29 Oct 2009 at 7:02 PM   |  Make this a Fark FavoriteFavorite    |   share: Share on OMGTWITTER WEB2.0share on StumbleUponshare on Facebook  more»   |    Get this fabulous T-Shirt and impress the methane out of your friends! shirt it!

47 Comments   (+0 »)


 
TheCheese [TotalFark] 2009-10-29 06:11:24 PM  
...and in 10 minutes someone will have programmed a bot to try all Amazon accounts and the phrase "Fark_Amazon" along with the numbers "1234".

 
Pocket Ninja [TotalFark] 2009-10-29 06:16:32 PM  
TheCheese: ...and in 10 minutes someone will have programmed a bot to try all Amazon accounts and the phrase "Fark_Amazon" along with the numbers "1234".

DAMNIT

 
Last One Left [TotalFark] 2009-10-29 06:22:20 PM  
Weird. That's the same "technology" that powers most working girl transactions: "how much?" followed by a 4-digit room number.

...

Or so I hear.

 
davidphogan [TotalFark] 2009-10-29 06:36:30 PM  
How is this less secure than entering your email address and password? That's only two variables also.

 
toddalmighty [TotalFark] 2009-10-29 07:02:06 PM  
That's PIN number, Subs.

/pet peave

 
codewerdna 2009-10-29 07:22:39 PM  
FTA:

"Best of all, it's not PayPal. It's linked to your credit card so if something goes wrong with your transaction, you actually have a prayer of getting your money back."

I spent 300$ on facebook games and the like because I'm an idiot. Anyways paypal returned the money within 4 days.

 
Choadzilla 2009-10-29 07:22:43 PM  
toddalmighty: That's PIN number, Subs.

/pet peave


Personal Identification Number number?

 
Slug2468 [TotalFark] 2009-10-29 07:27:23 PM  
Choadzilla: toddalmighty: That's PIN number, Subs.

/pet peave

Personal Identification Number number?


Ha ha! Todd's a dumbass!

 
codewerdna 2009-10-29 07:36:14 PM  
toddalmighty: That's PIN number, Subs.

/pet peave


It's your pet peeve to be grammatically incorrect?

 
schief2 [TotalFark] 2009-10-29 07:40:09 PM  
Man, someone must've chummed the waters, looks like they're biting at anything today.

 
thrgd456 2009-10-29 07:43:40 PM  
paypal rules

 
100 Watt Walrus 2009-10-29 07:44:18 PM  
Several people in this thread need new batteries in their sarcasm and meme detectors.

toddalmighty: 10/10. Simple, with just a whiff of snark, and you've already caught your limit.

 
The English Major [TotalFark] 2009-10-29 07:54:43 PM  
toddalmighty: That's PIN number, Subs.

/pet peave


I almost almost did that, just because I knew it would set off the usual shiatstorm. I salute you for taking the reigns.

 
jake3988 2009-10-29 08:04:11 PM  
Or, you could, you know, enter your credit card and store it in an account then you can buy things in a single click.

it's what I do!

 
Nogale 2009-10-29 08:04:30 PM  
I don't understand how this is supposed to work, nor do I understand how I'm supposed to buy from Amazon without logging in to their site.

 
TheShavingofOccam123 [TotalFark] 2009-10-29 08:05:59 PM  
open sesame
hot jugs
edible panties
damn wife
damn husband
lying bastard
fat pig
farking jerk
farking pig
farking idiot
kindle sux
drew curtis
secret muslin

 
Blind_Io 2009-10-29 08:14:04 PM  
Eh, you'll get over it.

 
roflmaonow 2009-10-29 08:33:33 PM  
Just bought from amazon using payphrase so I'm getting a kick out of my id being stolen..

 
Postal Penguin 2009-10-29 09:40:15 PM  
This seems like it would be even easier to brute force than username + password. The phrase is likely going to be two English words, coupled to only 10000 possible PINs. Am I missing something that would prevent this?

 
Alien Robot 2009-10-29 10:08:11 PM  
Space Odyssey 2001
Beverly Hills 9021
Christopher Columbus 1492
Pennsylvania Avenue 1600
Jennys Number 5309
Hastings Battle 1066
Star Trek 1701
Sarah Palin 2012
My Pin 1234

 
Kierkegaard's Pseudonym 2009-10-29 10:09:24 PM  
Alien Robot: Sarah Palin 2012

I bet this one will net about ten thousand or so stolen accounts.

 
Ironclad2 2009-10-29 10:25:54 PM  
Pennsylvania Six 5000

 
UsikFark 2009-10-29 10:44:17 PM  
asdf jkl; 1234

 
ski9600 2009-10-29 11:07:09 PM  
FArK, amazone is getting better, but I just ordered something last week. The supplier e-mailed me requesting a valid ship to address. You know, out here in the sticks our addresses aren't mapped yet. Maybe in teh 22nd century. Anyway, I e-mail back asking how they're going to ship and providing the appropriate addresses. Then this week they say they need the same info. I e-mail back their previous e-mail and my response, and nothing. I e-mail them today asking status of order, and they e-mail back that they need a valid address to ship to. How about telling me how you're going to ship it muther f ers.

 
unfair 2009-10-29 11:19:11 PM  
If I understand this properly it sounds like a really bad idea. According to the Amazon site each PayPhrase is unique, so it's basically like an odd username. The kicker is that they make you use a 4 digit pin with it.

This means that I can find a PayPhrase that's in use and try 10^4 combinations to crack it? Even with rate limiting that isn't many...

I guess maybe they're counting on the predetermined shipping address to stop crackers from targeting this service, but I could easily see kids doing it just to screw with people. Soon a lot of Amazon customers are going to have bulk boxes of vibrators showing up on their doorsteps..

 
DigitalCoffee 2009-10-29 11:57:57 PM  
Space Balls 1234(5)

/the Schwartz is strong with these guys

 
ITIL Prince [TotalFark] 2009-10-30 12:22:12 AM  
I tried this from a Fark thread: "never waddling you are the bad kind of bird". It was already taken.

Somebody try "George Lucas" and "1138". You won't get free stuff, but somebody is going to have some 'splaining to do when this shows up. (new window)

 
Doctor Jan Itor 2009-10-30 04:17:16 AM  
Van Halen 5150

 
Candygram4Mongo 2009-10-30 05:32:55 AM  
^^^^^^

So, basically I just need to come up with three more numbers, is that right?

 
NarrMaster 2009-10-30 06:35:21 AM  
Milk Force 0009

 
portscanner 2009-10-30 08:12:10 AM  
1234? That's the same number as the combination on my luggage!

 
ihatedumbpeople 2009-10-30 09:55:57 AM  
i've got dibs on blow job 6969

 
BraveNewCheneyWorld 2009-10-30 10:45:20 AM  
Kierkegaard's Pseudonym: I bet this one will net about ten thousand or so stolen accounts.

You really think Amazon is stupid enough to allow the product to be shipped to a location other than the billing address?

 
The English Major [TotalFark] 2009-10-30 10:54:43 AM  
BraveNewCheneyWorld: Kierkegaard's Pseudonym: I bet this one will net about ten thousand or so stolen accounts.

You really think Amazon is stupid enough to allow the product to be shipped to a location other than the billing address?


Well, considering I have shipped Christmas/birthday gifts to addresses that weren't my own, I would say...yes.

 
BraveNewCheneyWorld 2009-10-30 11:15:00 AM  
The English Major: Well, considering I have shipped Christmas/birthday gifts to addresses that weren't my own, I would say...yes.

The point of this is so you don't have to be logged in to order, you seem to think this is identical to a "full account access" login, which is not the case.

 
I am Ahab 2009-10-30 11:17:19 AM  
codewerdna: FTA:

"Best of all, it's not PayPal. It's linked to your credit card so if something goes wrong with your transaction, you actually have a prayer of getting your money back."

I spent 300$ on facebook games and the like because I'm an idiot. Anyways paypal returned the money within 4 days.


You did what now? Doesn't really matter I guess because whatever it is, you're doing it wrong.

 
The English Major [TotalFark] 2009-10-30 11:18:30 AM  
BraveNewCheneyWorld: The English Major: Well, considering I have shipped Christmas/birthday gifts to addresses that weren't my own, I would say...yes.

The point of this is so you don't have to be logged in to order, you seem to think this is identical to a "full account access" login, which is not the case.


I stand corrected.

 
Faux Shizzle 2009-10-30 12:42:04 PM  
Choadzilla: Personal Identification Number number?

Slug2468: Ha ha! Todd's a dumbass!

codewerdna: It's your pet peeve to be grammatically incorrect?

It's a triple-reverse rotsky. Such a troll has never been successfully executed on Fark before.

My hat's off to you sir...

(Just Google rotsky. You'll understand)

 
AZtoJapan [TotalFark] 2009-10-30 01:03:28 PM  
I don't think anybody has mentioned it but the payphrase is locked to a destination address along with a billing account. So if someone did steal your payphrase and PIN, whatever they ordered would be sent to you.

 
wage0048 2009-10-30 01:45:05 PM  
AZtoJapan: I don't think anybody has mentioned it but the payphrase is locked to a destination address along with a billing account. So if someone did steal your payphrase and PIN, whatever they ordered would be sent to you.

A roll of duct tape, a box of Hefty garbage bags, a hacksaw, a shovel, a bag of lyme, and 1 copy (each) of Barry R. Bodde's How to Divorce my Cheating Wife and Louis A. Case's How to Represent Yourself in Court.

 
Xaneidolon [TotalFark] 2009-10-30 01:48:00 PM  
The English Major: toddalmighty: That's PIN number, Subs.

/pet peave

I almost almost did that, just because I knew it would set off the usual shiatstorm. I salute you for taking the reigns rains.


I can't beleive an English Major would make such a simple mistake.

 
I am Ahab 2009-10-30 01:52:11 PM  
Xaneidolon: The English Major: toddalmighty: That's PIN number, Subs.

/pet peave

I almost almost did that, just because I knew it would set off the usual shiatstorm. I salute you for taking the reigns rains.

I can't beleive an English Major would make such a simple mistake.


What you did their, I see it.

 
The English Major [TotalFark] 2009-10-30 02:24:46 PM  
I am Ahab: Xaneidolon: The English Major: toddalmighty: That's PIN number, Subs.

/pet peave

I almost almost did that, just because I knew it would set off the usual shiatstorm. I salute you for taking the reigns rains.

I can't beleive an English Major would make such a simple mistake.

What you ewe did their, I see sea it.


Geez, people.

 
bugmn99 2009-10-30 03:42:41 PM  
codewerdna: FTA:

"Best of all, it's not PayPal. It's linked to your credit card so if something goes wrong with your transaction, you actually have a prayer of getting your money back."

I spent 300$ on facebook games and the like because I'm an idiot. Anyways paypal returned the money within 4 days.


I don't think you're an idiot. Can I have some money?

 
Nogale 2009-10-30 08:00:34 PM  
BraveNewCheneyWorld: Kierkegaard's Pseudonym: I bet this one will net about ten thousand or so stolen accounts.

You really think Amazon is stupid enough to allow the product to be shipped to a location other than the billing address?


They already do this. I have two billing addresses on file for two separate cards, and send things to as many as four different addresses - including outside the US.

 
veale728 [TotalFark] 2009-10-31 01:36:52 AM  
Nogale: BraveNewCheneyWorld: Kierkegaard's Pseudonym: I bet this one will net about ten thousand or so stolen accounts.

You really think Amazon is stupid enough to allow the product to be shipped to a location other than the billing address?

They already do this. I have two billing addresses on file for two separate cards, and send things to as many as four different addresses - including outside the US.


That's not how this would work though, presumably. I imagine for each two word and four number combination, it will ship to one and only one address.

 
MadTheologian 2009-11-01 08:32:08 PM  
George Orwell 1984

 
Displayed 47 of 47 comments


[Continue Farking]