PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize.
Uncategorized
36
Posts
24
Posters
1
Views
-
PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize. Attack works like this:
Stalker who wants your address opens an Amazon seller account and lists themselves as a third party seller for any item on your public wishlist. Then, they order the item from themselves as a gift for you. Bam, they have your address.
In particular, attack does not depend on an existing third party seller having poor PII handling hygiene, like the articles have implied.
@dalias I'm hoping we can use this opportunity to get people off of Amazon.
-
PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize. Attack works like this:
Stalker who wants your address opens an Amazon seller account and lists themselves as a third party seller for any item on your public wishlist. Then, they order the item from themselves as a gift for you. Bam, they have your address.
In particular, attack does not depend on an existing third party seller having poor PII handling hygiene, like the articles have implied.
@dalias A couple of guys I trained with in martial arts, are in a paramilitary group, and are now planning a para-doxing welcoming committee.
-
@dalias Or just mail you a tracker.
-
PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize. Attack works like this:
Stalker who wants your address opens an Amazon seller account and lists themselves as a third party seller for any item on your public wishlist. Then, they order the item from themselves as a gift for you. Bam, they have your address.
In particular, attack does not depend on an existing third party seller having poor PII handling hygiene, like the articles have implied.
@dalias holy shit, wow. I appreciate that heads up. Thank you.
-
@alex They obviously knew about it since the beginning. That's why gifts were limited to fulfilled-by-Amazon. Then some piece of shit manager with no understanding of safety wanted to make the sketchy marketplace more lucrative to sellers to compete in race to bottom.
@dalias exactly. They could also have trivially made wishlists with that setting private, which would at least limit the immediate harm, but that doesn't goose the wishlist metrics
-
@dalias
Never make a "wishlist" public, or share it.That would be nice, but a lot of people are using them as teachers for classroom supplies now or charities using them to get donations of supplies they need.
-
@dalias
Never make a "wishlist" public, or share it.@raymaccarthy @dalias true and even if this is how 'streamers' and 'content creators' grift, this is also used as a tool for mutual aid.
-
@raymaccarthy @dalias true and even if this is how 'streamers' and 'content creators' grift, this is also used as a tool for mutual aid.
@erikcats @raymaccarthy I'm not sure how accepting gifts from ppl who enjoy you entertaining them is "grift".
-
@erikcats @raymaccarthy I'm not sure how accepting gifts from ppl who enjoy you entertaining them is "grift".
@dalias @raymaccarthy i'm sorry, probably too jaded - milking parasocial relationships goes into the grift pigeonhole immediately. Your phrasing is a lot more generous, you're right
-
PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize. Attack works like this:
Stalker who wants your address opens an Amazon seller account and lists themselves as a third party seller for any item on your public wishlist. Then, they order the item from themselves as a gift for you. Bam, they have your address.
In particular, attack does not depend on an existing third party seller having poor PII handling hygiene, like the articles have implied.
@dalias With all of the current digital surveillance we are subjected to, that should not have been possible
-
PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize. Attack works like this:
Stalker who wants your address opens an Amazon seller account and lists themselves as a third party seller for any item on your public wishlist. Then, they order the item from themselves as a gift for you. Bam, they have your address.
In particular, attack does not depend on an existing third party seller having poor PII handling hygiene, like the articles have implied.
@dalias wait, does this coincide with the Mail I got from Amazon about third party sellers being allowed. Guess I'll delete my wishlist now. Haven't used it in years anyway 😬😬
-
PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize. Attack works like this:
Stalker who wants your address opens an Amazon seller account and lists themselves as a third party seller for any item on your public wishlist. Then, they order the item from themselves as a gift for you. Bam, they have your address.
In particular, attack does not depend on an existing third party seller having poor PII handling hygiene, like the articles have implied.
@dalias Again I Think logistic companies coming as intermediaries can serve to shield our Addresses since only their addresses will be given
-
Note that even PO boxes are not particularly safe against a dedicated stalker. They can stake out the PO for someone picking up a distinctive package once they know what PO it's at.
@dalias Thanks for the heads up on this. Deleted all my wishlists and set the default to private.
-
PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize. Attack works like this:
Stalker who wants your address opens an Amazon seller account and lists themselves as a third party seller for any item on your public wishlist. Then, they order the item from themselves as a gift for you. Bam, they have your address.
In particular, attack does not depend on an existing third party seller having poor PII handling hygiene, like the articles have implied.
@dalias I would have expected that wish listing something would mark that exact product from that exact seller as the thing you want. Like... I want this known authentic doodad from this known reputable seller.
Is that not the case?
-
That would be nice, but a lot of people are using them as teachers for classroom supplies now or charities using them to get donations of supplies they need.
@darwinwoodka @dalias
They can share what they need as an item that the donor buys? No need to share an account's "wishlist". -
PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize. Attack works like this:
Stalker who wants your address opens an Amazon seller account and lists themselves as a third party seller for any item on your public wishlist. Then, they order the item from themselves as a gift for you. Bam, they have your address.
In particular, attack does not depend on an existing third party seller having poor PII handling hygiene, like the articles have implied.
@dalias I did not understand this. Thank you for letting us know!
-
PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize. Attack works like this:
Stalker who wants your address opens an Amazon seller account and lists themselves as a third party seller for any item on your public wishlist. Then, they order the item from themselves as a gift for you. Bam, they have your address.
In particular, attack does not depend on an existing third party seller having poor PII handling hygiene, like the articles have implied.
@dalias Thanks for this. Does this apply to Audible too?
-
The only mitigations are refraining from using public wishlists entirely (set any wishlists you may have to private) or using a PO box or reshipping service to conceal your real physical/final address.
@dalias id go a step further and recommend people stop making Jeff Bezos richer in general.
-
@dalias I would have expected that wish listing something would mark that exact product from that exact seller as the thing you want. Like... I want this known authentic doodad from this known reputable seller.
Is that not the case?
@Ragashingo @dalias that's what they're taking away, as I understand it. So I think it's the case _now_, it will shortly _not_ be the case.
So if you're lucky, you can now get the same thing from a third-party seller. If you're mid-lucky, you can get something passing itself off as the same listing from a third-party scammer. If you're unlucky, your address gets leaked to a third-party stalker.
Clearly I wasn't the only person who read that mail this morning and thought "oh no".
-
PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize. Attack works like this:
Stalker who wants your address opens an Amazon seller account and lists themselves as a third party seller for any item on your public wishlist. Then, they order the item from themselves as a gift for you. Bam, they have your address.
In particular, attack does not depend on an existing third party seller having poor PII handling hygiene, like the articles have implied.
@dalias fixed and told the family
Feed RSS
Gli ultimi otto messaggi ricevuti dalla Federazione
-
Current* conditions near Alexandria Bay, NY:
-
Inauguriamo la rubrica #laScuolaDimenticata #nonPiuScuola con un articoletto sulla #provaDelNove
https://wok.oblomov.eu/mathesis/prova-del-nove/
Menzione speciale alla #provaDellUndici che piace tanto a @mau
-
@cm that too
-
@afreytes Or did you just have it all in your head and just needed to type it now, while you spent your morning thinking about the problem at hand, searching reference docs, etc?
-
I... Uh... Lost all four hours of my morning's code...
And I redid all of it in 15 minutes. No I'm not that good. I just accomplished very little this morning.
-
Luchè è stato da Tigotà e si è trasformato nel mostro peloso morbidoso
-
@RiversideBryan more prosaically, on first look I thought this was an outhouse 8-D
-
@aaronwinstonsmith vediamo cosa ne pensano gli altri, poi svelerò il segreto.
