Sinisterly
Mail from ofm@amazon - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: Mail from ofm@amazon (/Thread-Mail-from-ofm-amazon)

Pages: 1 2 3

RE: Mail from ofm@amazon - Brunello - 06-03-2020

(06-02-2020, 11:18 PM)sidinkz Wrote:
(06-02-2020, 10:40 PM)Justaguy121 Wrote:
(06-02-2020, 09:36 PM)mothered Wrote: Did you change every Identifiable details, Inclusive of the payment system?
Yep everything  the only similarity was that I refunded it on the same device
That is really strange! Must mean they can see the MAC address
I can confirm they do it, I had the same problem back in 2018.

I logged in using my mate’s PC, once they cancelled my account because of too any refund, his was deleted too without having done a single one.

RE: Mail from ofm@amazon - Oni - 06-03-2020

(06-02-2020, 11:18 PM)sidinkz Wrote:
(06-02-2020, 10:40 PM)Justaguy121 Wrote:
(06-02-2020, 09:36 PM)mothered Wrote: Did you change every Identifiable details, Inclusive of the payment system?
Yep everything  the only similarity was that I refunded it on the same device
That is really strange! Must mean they can see the MAC address

You must mean IP address, as it is not normal for a website to be able to identify your MAC address. If you were using their mobile app, that may be possible.

RE: Mail from ofm@amazon - Filament - 06-03-2020

(06-02-2020, 11:18 PM)sidinkz Wrote:
(06-02-2020, 10:40 PM)Justaguy121 Wrote:
(06-02-2020, 09:36 PM)mothered Wrote: Did you change every Identifiable details, Inclusive of the payment system?
Yep everything  the only similarity was that I refunded it on the same device
That is really strange! Must mean they can see the MAC address

I don't think a web browser can get a user's MAC address. There are lots of other identifiable details, such as ip, cookies, user agent details, localStorage, etc.

RE: Mail from ofm@amazon - Oni - 06-03-2020

(06-03-2020, 06:17 AM)Filament Wrote:
(06-02-2020, 11:18 PM)sidinkz Wrote:
(06-02-2020, 10:40 PM)Justaguy121 Wrote: Yep everything  the only similarity was that I refunded it on the same device
That is really strange! Must mean they can see the MAC address

I don't think a web browser can get a user's MAC address. There are lots of other identifiable details, such as ip, cookies, user agent details, localStorage, etc.

It would be possible via IPv6 (w/ EUI-64 address), but that's not the case for most users.

RE: Mail from ofm@amazon - mothered - 06-03-2020

(06-02-2020, 11:18 PM)sidinkz Wrote: That is really strange! Must mean they can see the MAC address
The MAC address on your "device", doesn't travel beyond your local/Internal network.

For Instance, when your device connects to your Router, It's the "Router's MAC address" that's active. When the Router connects to your ISP and then the ISP establishes a connection to a server on the Internet, It's the "ISP's MAC address" that's visible.

(06-02-2020, 10:40 PM)Justaguy121 Wrote: Yep everything  the only similarity was that I refunded it on the same device
They may have Identified some sort of fingerprint- Canvas, WebGL, WebTRC etc.

Use another device and you'll be fine.

RE: Mail from ofm@amazon - sidinkz - 06-03-2020

does that mean when using a fake billing address and faking a cc statement will not work with amazon? Can they see the billing name & address when placing an order. As in is this data shared by the issuer to merchant

RE: Mail from ofm@amazon - Defeat - 06-03-2020

You should be fine. I usually respond to them and they say they're just trying to understand account activity, thanks. Maybe take a break from refunds on that account though.
(06-03-2020, 01:33 AM)Brunello Wrote:
(06-02-2020, 11:18 PM)sidinkz Wrote:
(06-02-2020, 10:40 PM)Justaguy121 Wrote: Yep everything  the only similarity was that I refunded it on the same device
That is really strange! Must mean they can see the MAC address
I can confirm they do it, I had the same problem back in 2018.

I logged in using my mate’s PC, once they cancelled my account because of too any refund, his was deleted too without having done a single one.

I've said it before: Amazon only uses IP address to link accounts, nothing more.

RE: Mail from ofm@amazon - Filament - 06-03-2020

(06-03-2020, 06:20 AM)Oni Wrote:
(06-03-2020, 06:17 AM)Filament Wrote:
(06-02-2020, 11:18 PM)sidinkz Wrote: That is really strange! Must mean they can see the MAC address

I don't think a web browser can get a user's MAC address. There are lots of other identifiable details, such as ip, cookies, user agent details, localStorage, etc.

It would be possible via IPv6 (w/ EUI-64 address), but that's not the case for most users.

Oh neat. Never actually spent time looking at what the different bits in the IPv6 address are. Seems like upgrading to IPv6 would just make SE'ing harder aha.

(06-03-2020, 09:35 AM)mothered Wrote:
(06-02-2020, 11:18 PM)sidinkz Wrote: That is really strange! Must mean they can see the MAC address
The MAC address on your "device", doesn't travel beyond your local/Internal network.

For Instance, when your device connects to your Router, It's the "Router's MAC address" that's active. When the Router connects to your ISP and then the ISP establishes a connection to a server on the Internet, It's the "ISP's MAC address" that's visible.

(06-02-2020, 10:40 PM)Justaguy121 Wrote: Yep everything  the only similarity was that I refunded it on the same device
They may have Identified some sort of fingerprint- Canvas, WebGL, WebTRC etc.

Use another device and you'll be fine.

Admittedly, I don't know much about frontend, but aren't these just frontend rendering frameworks? Never heard of WebRTC, but from a quick google, it appears to just get video/audio. Wouldn't this require explicit permission in the browser? Either way, I'm genuinely curious how these leave a fingerprint of the user.

(06-03-2020, 04:36 PM)Strait McCool Wrote: You should be fine.  I usually respond to them and they say they're just trying to understand account activity, thanks. Maybe take a break from refunds on that account though.
(06-03-2020, 01:33 AM)Brunello Wrote:
(06-02-2020, 11:18 PM)sidinkz Wrote: That is really strange! Must mean they can see the MAC address
I can confirm they do it, I had the same problem back in 2018.

I logged in using my mate’s PC, once they cancelled my account because of too any refund, his was deleted too without having done a single one.

I've said it before: Amazon only uses IP address to link accounts, nothing more.
Is this from personal experience or insider knowledge? Not that I doubt you or anything, but I find it hard to believe that they would only use IP address considering they have some great software engineers and have options to track their users in a variety of ways. This could help for scams, but also just for general marketing as well.

RE: Mail from ofm@amazon - Defeat - 06-03-2020

(06-03-2020, 07:04 PM)Filament Wrote:
(06-03-2020, 06:20 AM)Oni Wrote:
(06-03-2020, 06:17 AM)Filament Wrote: I don't think a web browser can get a user's MAC address. There are lots of other identifiable details, such as ip, cookies, user agent details, localStorage, etc.

It would be possible via IPv6 (w/ EUI-64 address), but that's not the case for most users.

Oh neat. Never actually spent time looking at what the different bits in the IPv6 address are. Seems like upgrading to IPv6 would just make SE'ing harder aha.

(06-03-2020, 09:35 AM)mothered Wrote:
(06-02-2020, 11:18 PM)sidinkz Wrote: That is really strange! Must mean they can see the MAC address
The MAC address on your "device", doesn't travel beyond your local/Internal network.

For Instance, when your device connects to your Router, It's the "Router's MAC address" that's active. When the Router connects to your ISP and then the ISP establishes a connection to a server on the Internet, It's the "ISP's MAC address" that's visible.

(06-02-2020, 10:40 PM)Justaguy121 Wrote: Yep everything  the only similarity was that I refunded it on the same device
They may have Identified some sort of fingerprint- Canvas, WebGL, WebTRC etc.

Use another device and you'll be fine.

Admittedly, I don't know much about frontend, but aren't these just frontend rendering frameworks? Never heard of WebRTC, but from a quick google, it appears to just get video/audio. Wouldn't this require explicit permission in the browser? Either way, I'm genuinely curious how these leave a fingerprint of the user.

(06-03-2020, 04:36 PM)Strait McCool Wrote: You should be fine.  I usually respond to them and they say they're just trying to understand account activity, thanks. Maybe take a break from refunds on that account though.
(06-03-2020, 01:33 AM)Brunello Wrote: I can confirm they do it, I had the same problem back in 2018.

I logged in using my mate’s PC, once they cancelled my account because of too any refund, his was deleted too without having done a single one.

I've said it before: Amazon only uses IP address to link accounts, nothing more.
Is this from personal experience or insider knowledge? Not that I doubt you or anything, but I find it hard to believe that they would only use IP address considering they have some great software engineers and have options to track their users in a variety of ways. This could help for scams, but also just for general marketing as well.
Only from personal experience.

RE: Mail from ofm@amazon - Filament - 06-03-2020

(06-03-2020, 10:32 PM)Strait McCool Wrote: Only from personal experience.

Maybe you're lucky. It seems like some other forum members are having lots of trouble with fresh accounts changing as much of the information they can.
Or maybe you're doing a different part of the process better c:
Who knows.