...and in 10 minutes someone will have programmed a bot to try all Amazon accounts and the phrase "Fark_Amazon" along with the numbers "1234".

TheCheese: ...and in 10 minutes someone will have programmed a bot to try all Amazon accounts and the phrase "Fark_Amazon" along with the numbers "1234".

DAMNIT

Weird. That's the same "technology" that powers most working girl transactions: "how much?" followed by a 4-digit room number.

...

Or so I hear.

How is this less secure than entering your email address and password? That's only two variables also.

That's PIN number, Subs.

/pet peave

FTA:

"Best of all, it's not PayPal. It's linked to your credit card so if something goes wrong with your transaction, you actually have a prayer of getting your money back."

I spent 300$ on facebook games and the like because I'm an idiot. Anyways paypal returned the money within 4 days.

toddalmighty: That's PIN number, Subs.

/pet peave

Personal Identification Number number?

Choadzilla: toddalmighty: That's PIN number, Subs.

/pet peave

Personal Identification Number number?

Ha ha! Todd's a dumbass!

toddalmighty: That's PIN number, Subs.

/pet peave

It's your pet peeve to be grammatically incorrect?

Man, someone must've chummed the waters, looks like they're biting at anything today.

paypal rules

Several people in this thread need new batteries in their sarcasm and meme detectors.

toddalmighty: 10/10. Simple, with just a whiff of snark, and you've already caught your limit.

toddalmighty: That's PIN number, Subs.

/pet peave

I almost almost did that, just because I knew it would set off the usual shiatstorm. I salute you for taking the reigns.

Or, you could, you know, enter your credit card and store it in an account then you can buy things in a single click.

it's what I do!

I don't understand how this is supposed to work, nor do I understand how I'm supposed to buy from Amazon without logging in to their site.

open sesame
hot jugs
edible panties
damn wife
damn husband
lying bastard
fat pig
farking jerk
farking pig
farking idiot
kindle sux
drew curtis
secret muslin

Eh, you'll get over it.

Just bought from amazon using payphrase so I'm getting a kick out of my id being stolen..

This seems like it would be even easier to brute force than username + password. The phrase is likely going to be two English words, coupled to only 10000 possible PINs. Am I missing something that would prevent this?

Space Odyssey 2001
Beverly Hills 9021
Christopher Columbus 1492
Pennsylvania Avenue 1600
Jennys Number 5309
Hastings Battle 1066
Star Trek 1701
Sarah Palin 2012
My Pin 1234

Alien Robot: Sarah Palin 2012

I bet this one will net about ten thousand or so stolen accounts.

Pennsylvania Six 5000

asdf jkl; 1234

FArK, amazone is getting better, but I just ordered something last week. The supplier e-mailed me requesting a valid ship to address. You know, out here in the sticks our addresses aren't mapped yet. Maybe in teh 22nd century. Anyway, I e-mail back asking how they're going to ship and providing the appropriate addresses. Then this week they say they need the same info. I e-mail back their previous e-mail and my response, and nothing. I e-mail them today asking status of order, and they e-mail back that they need a valid address to ship to. How about telling me how you're going to ship it muther f ers.

If I understand this properly it sounds like a really bad idea. According to the Amazon site each PayPhrase is unique, so it's basically like an odd username. The kicker is that they make you use a 4 digit pin with it.

This means that I can find a PayPhrase that's in use and try 10^4 combinations to crack it? Even with rate limiting that isn't many...

I guess maybe they're counting on the predetermined shipping address to stop crackers from targeting this service, but I could easily see kids doing it just to screw with people. Soon a lot of Amazon customers are going to have bulk boxes of vibrators showing up on their doorsteps..