Apple watch 5 Se - Printable Version

Apple watch 5 Se - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: Apple watch 5 Se (/Thread-Apple-watch-5-Se)

Pages: 1 2

Apple watch 5 Se - holio2k - 05-29-2020

Hi
Was thinkg about SEing an Apple Watch and ”return” It with the Ftid-method. I have done a couple of the test runs and they seen to work fine. My plan was to send a spoof package to another address in the same zipcode matching weight so I get the tracking number and matching weight right.

The tracking page does not show exactly was the package was dropped off so If they start an investigation rhey probably cant locate it unless theres a signature or gps involved. But from my experience they dont.
I dont have return label but a prepaid onethat I intend to edit to remove my personal info. Its a kind of small business so sending directly to them probably wouldnt work.

Any ideas about this?

RE: Apple watch 5 Se - mothered - 05-29-2020

Quote:My plan was to send a spoof package to another address

What happens when they check the tracking number, and establish that It was shipped to an address other than theirs?

RE: Apple watch 5 Se - holio2k - 05-29-2020

The dont. It doesnt show up on the tracking info for security reasons.

RE: Apple watch 5 Se - mothered - 05-29-2020

(05-29-2020, 04:55 PM)holio2k Wrote: The dont. It doesnt show up on the tracking info for security reasons.

So what's the point of having a tracking number to begin with?

Tracking ensures It's dispatched by the sender, and accepted by the receiver.

RE: Apple watch 5 Se - holio2k - 05-29-2020

The point it to make i like they lost the package. Even if the wrong address is not far from the real receiver it appears as the original receiver recived the package. I have tried it and it works. If the original address was like Street address 101, chaning it to 103 does work. That is if the if the only check the tracking number and it shows the traking as received.

RE: Apple watch 5 Se - mothered - 05-29-2020

(05-29-2020, 05:21 PM)holio2k Wrote: That is if the if the only check the tracking number and it shows the traking as received.

However, It's not received by the corresponding recipient.

I understand your point, Inclusive of the FTID method. This may work If the company's receiving area does not cross-check the full receiver's address. If they do, I can assure you that It will fail.

RE: Apple watch 5 Se - holio2k - 05-29-2020

What would happed if I ship to an non existing address? Will the package get lost in transit?

What would be the best eption? If I sent the empty package with the matching weight and remove all the my personal info? They will probably throw the package inte trash and forget about all about it. No info on the package will be there telling them there was supposed be a Apple Watch inside. On the other hand I have a tracking and proof the the original receiver got the packet and Incan claim I have sent back as I have the tracking and probably a signaturez

RE: Apple watch 5 Se - Brunello - 05-29-2020

I tried with Royal Mail (if you’re in the UK) and UPS.

The original address is registered electronically but no one will double check with the one on the label at the moment of the collection.

RE: Apple watch 5 Se - mothered - 05-30-2020

(05-29-2020, 06:00 PM)holio2k Wrote: What would happed if I ship to an non existing address? Will the package get lost in transit?

It will be shipped back to the sender, who Is Identified by cross-checking the tracking number.

(05-29-2020, 06:00 PM)holio2k Wrote: What would be the best eption? If I sent the empty package with the matching weight and remove all the my personal info? They will probably throw the package inte trash and forget about all about it.

That's the point of the FTID method- to show the tracking number as delivered (carrier-wise), but the company has no record of the package.

As such, It's not entered Into their system and assigned to the sender (yourself). A refund will be Issued manually thereafter.

(05-29-2020, 06:00 PM)holio2k Wrote: No info on the package will be there telling them there was supposed be a Apple Watch inside.

There will be Info, namely the tracking number that's dedicated to the sender, hence the objective Is getting the company to dispose the package.

RE: Apple watch 5 Se - Filament - 05-31-2020

(05-29-2020, 05:30 PM)mothered Wrote:
(05-29-2020, 05:21 PM)holio2k Wrote: That is if the if the only check the tracking number and it shows the traking as received.
However, It's not received by the corresponding recipient.

I understand your point, Inclusive of the FTID method. This may work If the company's receiving area does not cross-check the full receiver's address. If they do, I can assure you that It will fail.

Even if company cross-checks, the original address on the tracking label will show the company's address.

Edit: I can see if they investigate with the courier though, it's possible that they'll know the address they delivered to and it doesn't match with their tracking number.
Don't know enough about how the couriers work/ probably different from courier to courier, and even delivery person to delivery person to comment.
But I feel like the chances of them opening an investigation with courier when it says 100% delivered is unlikely.

(05-30-2020, 05:20 AM)mothered Wrote: It will be shipped back to the sender, who Is Identified by cross-checking the tracking number.
That's the point of the FTID method- to show the tracking number as delivered (carrier-wise), but the company has no record of the package.
As such, It's not entered Into their system and assigned to the sender (yourself). A refund will be Issued manually thereafter.
There will be Info, namely the tracking number that's dedicated to the sender, hence the objective Is getting the company to dispose the package.

I don't understand how modifying the label isn't enough. I find it safer than sending directly to the company since they have the option to scan the barcode and cross-reference the tracking number to your order. My thought was no matter what you send to the company, they will have the option to write it in your claim that they received an odd package without the product under your RMA's tracking number. For prepaid labels, it works even better because the company itself gave the tracking #. There is risk with any method, but changing the address on the label itself seems less risky than sending a package they would dispose of if you received a prepaid label. Please enlighten me Smile

Edit:
If you do not receive any prepaid label (which seems highly unlikely of Apple), then I can understand sending the package directly to them, since there is no reference to the tracking number on your claim (yet). In this way, sending to the company makes a lot of sense. There's almost no way the company would keep track of tracking numbers that contained empty packages (maybe until they get raped with FTID lol)
Is this scenario what you're talking about?