A Defensive Computing Checklist
by Michael Horowitz
Some topics below:
Toxic Products, Fake Books, Other Fake Stuff,
Amazon spies on us, Amazon Spying Defense,
Amazon search results,
Fake Reviews, Bait and Switch Reviews,
Defensive Steps, Customer Service,
Fake reviews, fake products, fake sales and toxic products. Even Amazon's Choice is purposely misleading.
- FYI: In December 2022, my Amazon account was suspended. I had to call them and answer assorted questions to prove that it was my account. Had I not answered the questions correctly, there was no fallback, the account would have been lost to me. I use Echo/Alexa to play music for a senior citizen who does not live with me and who has limited mental, let alone technical, ability. Losing access to the remote Echo device would have been a big deal to me. The Amazon person asked a bunch of off-the wall questions about my prior activity with Amazon. I am not going to say exactly what they asked as that would help bad guys prepare for this sort of thing. I made this is the top item here as a heads-up: keep very good records of what you do with Amazon. Had I not kept detailed records, I would have lost my account. As for why my account was suspended, I have no idea.
- FYI: Amazon has two Help articles on their site with the same title and some basic Defensive Computing: Identifying Whether an Email, Phone Call, Text Message, or Webpage is from Amazon and again here: Identifying Whether an Email, Phone Call, Text Message, or Webpage is from Amazon. Both pages have this important warning: "While some departments at Amazon will make outbound calls to customers, Amazon will never ask you to disclose or verify sensitive personal information, or offer you a refund you do not expect."
- Banning sellers: In September 2021, it looked like Amazon was doing something about paid-for reviews Amazon has removed goods from 600 Chinese merchants for review fraud by Brad Linder. But the ban was flawed: We bought gadgets from Amazon’s banned brands and it was a piece of cake by Sean Hollister (Oct 2021)
- If you are contacted by someone/something pretending to be Amazon, report it to Amazon here: Report Something Suspicious
- How to tell real products from scams when shopping online Washington Post (Oct 2021). A long list of ways to research the seller of a product. Most of the article is not specific to Amazon.
- Amazon sells hand sanitizers that people buy as a defense against the COVID-19 coronavirus. To do that job, a sanitizer needs to be 60% alcohol. Many sanitizers have no alcohol and depend on benzalkonium chloride instead. Will Amazon do anything to protect us? No. Not only are ineffective products not flagged as such, then too, there is the price gouging on said products. When queried, Amazon said nothing. From: You Might Be Buying a Hand Sanitizer That Won’t Work for Coronavirus (March 2020) by Marshall Allen and Lisa Song of ProPublica.
- TOXIC PRODUCTS:
Amazon sells dangerous products both from third parties and from their own Amazon Basics line.
- October 2020: AmazonBasics Electronics Fire Lawsuit from The Schmidt Firm LLC. A September 2020 investigation by CNN found at least 70 AmazonBasics® products linked to over 1,500 reviews describing serious safety hazards. Nearly 200 of the reviews involved property damage, such as burned walls. CNN warned that many are still for sale, despite Amazon being made aware of the problem. Amazon branded products to avoid include surge protectors, microwaves, USB cords, phone chargers, paper shredders and batteries.
- June 2020: Amazon's Enforcement Failures Leave Open a Back Door to Banned Goods - Some Sold and Shipped by Amazon Itself By Annie Gilbertson and Jon Keegan for The Markup. They claim to ban products related to drugs, spying and weapons, but they found plenty for sale; one of the items bought on the site left a grim trail of overdoses. Their investigation found nearly 100 listings for products that the company claims to ban. One cited example was that of pill presses used to make scam prescription drugs.
- August 2019: Huge expose from the Wall Street Journal Amazon Has Ceded Control of Its Site. The Result: Thousands of Banned, Unsafe or Mislabeled Products. Subhead: Amazon is unable or unwilling to effectively police third-party sellers on its site. The Journal found 4,152 items for sale that have been declared unsafe by U.S. government agencies, are deceptively labeled or are banned by federal regulators. Big-box retailers would not sell this stuff. Along with the expose, the Journal published a Defensive Shopping article: Amazon Shoppers: This Is How to Safety-Proof Your Order.
- July 2019: A month earlier, Vice had this story: Amazon Won't Stop Selling Toxic Products In the U.S. Amazon knows that some creams and cosmetics are dangerous, yet they allows them to be sold nonetheless, and without warnings. And, this: Amazon is shipping expired baby formula and other out-of-date foods.
- FAKE BOOKS
A long standing problem that Amazon clearly does not care about. We are probably better off buying books elsewhere.
- Tweets from author François Chollet (July 2022): "Anyone who has bought my book from Amazon in the past few month hasn't bought a genuine copy, but a lower-quality counterfeit copy printed by various fraudulent sellers ... The problem is systemic. For my own book I've seen a total of 5 different fraudulent sellers so far. Reporting them achieves nothing." From here.
- What Happens After Amazon’s Domination Is Complete? Its Bookstore Offers Clues by David Streitfeld in the New York Times (June 2019). One book publisher bought 34 copies of their book on Amazon, as a test, and 30 were counterfeit. Amazon's business model is to have the same laid-back approach to bad guys as Facebook and YouTube. Follow-up by Streitfeld (Aug. 2019) about counterfeit George Orwell books:
Paging Big Brother: In Amazon’s Bookstore, Orwell Gets a Rewrite. Eleven fake books were sold by Amazon as new. The author tried to find a way to report the counterfeit books, but failed.
- OTHER FAKE STUFF
- Fake UL safety certification: An Oct. 2021 tweet by @SwiftOnSecurity "There appears to be no way to alert Amazon to dangerous products fraudulently claiming UL safety certification. There's literally no mechanism on the largest e-commerce platform to flag abuse."
- Fake products: Fake and dangerous kids products are turning up for sale on Amazon by CNN (Dec 2019). Amazon sells both a good infant car seat for $500 and a counterfeit version of it that will kill a kid for $300. Seven different business owners told CNN their products were being actively targeted by counterfeiters.
- Fake products: Extra inventory. More sales. Lower prices. How counterfeits benefit Amazon by David Pierson of the LA Times (September 2018). Real and fake products are thrown into the same storage bin. A guy who owns a company bought his own product on Amazon and got sent a fake.
- Fake products: Trying to buy a microSD card proved to me that Amazon is becoming a scammers' paradise by Matt Hanson of TechRadar (April 2022). Avoid microSD cards that are too cheap. Bad guys use special software to make the cards appear to have a larger capacity than they actually do. "Once victims realize that they've been scammed, they invariably find that they can't contact the seller to ask for a refund." Some of the scam cards even showed up as 'sponsored' results.
- Fake "choice": Amazon's Choice is a label awarded by an algorithm based on customer reviews, price, and, of course, whether the product is in stock. After all, selling is what Amazon does. Two outlets have exposed it as a scam. First: 'Amazon's Choice' Does Not Necessarily Mean A Product Is Good by Nicole Nguyen of Buzzfeed (June 2019). The article documents many bad products marked as an 'Amazon Choice'. Amazon declined to answer questions about exactly how items are selected. The article also discusses fake products on Amazon. Then: Amazon’s Choice Isn't the Endorsement It Appears by the Wall Street Journal (Dec 2019). They examined 27,100 Amazon’s Choice items. Nearly 1,600 appeared to have been manipulated to get the Choice label. Worse, many Choice products were dangerous. Some products products have safety concerns, some make false claims and some violate Amazon's own policies. Amazon chose the word "Choice" rather than "Recommends" because they knew it was a scam.
- Fake Chromebook descriptions: In November 2020, Kevin C. Tofel warned (Getting your first Chromebook? Here’s a buying guide of what to look for) that Amazon lists many old Chromebooks as "new", "newest" or "2020" models, when in fact, they are not.
- Fake sales: A warning about fake sales on Prime Day from Ars Technica. Quoting: "... most of this year's Prime Day deals aren't really deals at all. Amazon will promote thousands of 'discounts' over the next two days, but with that much volume, the majority of those offers will naturally have less-than-special prices or apply to less-than-desirable products. Many 'deal prices' are relative to MSRPs that products have not sold at for months..." (July 2019)
- AMAZON SPIES ON US
Amazon collects a lot of information about customers. They save everything customers search for, both on the website and with the Amazon app. This information is used in targeted advertising.
- Background: Tour Amazon’s dream home, where every appliance is also a spy by Geoffrey A. Fowler for The Washington Post (Oct 2022). Covers the many devices Amazon makes and how each one spies on us.
- Background: The data game: what Amazon knows about you and how to stop it by Kate O'Flaherty for The Guardian (Feb 2022). Excellent statement of the problem, not much on defense. Amazon is so good at figuring out what you will buy next, that they sell their algorithms as as a service called Amazon Forecast. Good explanation of why you should not store photos at Amazon.
- Article: 4 Amazon privacy settings you should change right now by Jared Newman for PC World. March 2023
- Article: Celebrate Prime Day by Deleting the Data Amazon Has on You by David Nield for Gizmodo (July 2022). The article covers Amazon Echo recordings, Prime Video Viewing, Fire tablets, Kindles, Order History and more. Also, how to request the info Amazon has on you.
- No Defense: Amazon's Eero routers spy on you. The only way to stop Eero devices from gathering data is to not use them. From: Your Router Is Collecting Your Data. Here's What to Know, and What You Can Do About It by Ry Crist of CNET (Feb. 2022)
- Episode 208 (February 26, 2021) of The Privacy, Security, & OSINT podcast was on Amazon Privacy. By Michael Bazzell.
- All the ways Amazon tracks you and how to stop it by Matt Burgess for Wired (June 2021). Note that the links for Cookie Preferences do not work in the US (the article is for England) and there do not seem to be any Cookie related preferences available in the US.
- Amazon privacy settings to change now by Heather Kelly for the Washington Post (Sept. 2021)
- Security and Privacy by Amazon
- AMAZON SPYING DEFENSES
- Amazon tracks everything you do on their website. To combat this, I suggest shopping/researching in one browser, and buying in another. The shopping/researching browser should use
Private Mode and not be logged in to Amazon. Better yet, use a browser-based VPN in that browser. When you find what you want to buy, login to Amazon with another browser (also using Private Mode), copy the URLs of the items you want to purchase into this second browser, buy them, and then immediately log out of Amazon and shut down both browsers.
- Obvious defense: Do not use Alexa, a Kindle, Eero or a Ring doorbell. Use Roku rather than Fire TV. Roku is also big into spying, but they don't know nearly as much about you as Amazon does.
- AMAZON WEBSITE TWEAKS
Fight back as best we can. First sign in to amazon.com, then:
- Disable your browsing history: go directly to the Browsing History page or click on the Account and Lists
dropdown -> Browsing History -> Manage History -> Turn Browsing History off.
- Advertising Preferences: Go directly to the Ad Preferences page or Click on the Account and Lists dropdown ->
Account -> Advertising preferences (in the Communication and content box). Turn off interest-based ads provided by Amazon and click the Save Changes
button. While there, also "Delete your personal information from our ad systems" by clicking on the "Delete ad data" button.
- Shopping and wish lists: Go directly to the Your Lists page or click on the Account and Lists dropdown -> Wish List. For each Wish List and Shopping List, insure it is private.
- Prime video Watch History: Under Account and Lists -> video purchases & rentals -> click your name -> Account & Settings -> Watch History. Each video has a
"Delete from Watch History" link.
- Alexa data collection: Go to the Alexa Manage Your Alexa Data page.
In the Voice Recordings section -> Choose how long to save recordings -> Don’t save recordings. The default is "Save recordings until I delete them"
In the Smart Home Device History section -> Choose how long to save history -> and opt for the shortest option offered. As of March 2023, this was 3 months.
The default is "Save history until I delete it"
Just under this is an option for "One-time deletion of all history" which will "...delete from Alexa the history of usage and status events reported by your connected third-party smart home devices." Click the Delete button.
In the Detected Sounds History section -> Choose how long to save history -> and opt for the same 3 months
In the Help improve Alexa section -> turn off both options: "Use of voice recordings" and "Use messages to improve transcriptions"
- For Fire tablets or Kindle e-readers, go to the Amazon Devices Privacy page. From there, select a device, then disable whatever you can, such as: Location-based services, Device Usage Data, Interest-based ads and Collect App Usage Data. In my experience, a Fire tablet had all of these options, but a Kindle only had Device Usage Data as the lone option.
- AMAZON SEARCH RESULTS
- Amazon's search results full of ads that may be 'unlawfully deceiving' consumers, complaint to FTC claims by Cat Zakrzewski and Jay Greene of The Washington Post (Dec 2021). Because Amazon does not clearly label sponsored search results, consumers could be deceived into clicking on them without knowing. More than a quarter of the search results on Amazon are paid ads, according to the complaint.
- Overflowing with sleaze: Amazon Puts Its Own Brands First Above Better-Rated Products from The Markup (Oct 2021). That Amazon prefers its own brand is no surprise. It prefers its own brands over competitors with higher ratings and more sales. And, it also prefers exclusive products are not obviously connected to Amazon. They identified more than 150 brands registered by or owned by Amazon where the connection to the company is not obvious. Those are in addition to the hundreds of third-party brands that are exclusive to the site. And, ads in the search results are not all labeled as ads. And, Amazon has been accused of knocking off existing popular products to sell under its house brands.
- FAKE REVIEWS ON AMAZON
- How to Spot Fake Reviews and Shady Ratings on Amazon by Nicole Nguyen for the Wall Street Journal (July 2022). Amazon did not respond to requests for comment. Verified purchase ratings can be faked. Among a long list of things to do: avoid products with only 5-star reviews, inspect the one-star reviews first, read the most recent reviews and much more.
- Posing as Amazon seller, consumer group investigates fake-review industry by Jon Brodkin of Ars Technica (Feb. 2021). Fake Amazon reviews are sold in bulk. A thousand reviews are roughly $11,000. Based on this report by Which?, a Consumers' Association in the UK that does product research and advocacy on behalf of consumers: How a thriving fake review industry is gaming Amazon marketplace by Hannah Walsh (Feb. 2021).
- Manipulating Amazon reviews: Inside Amazon’s Fake Review Economy by Nicole Nguyen of BuzzFeed (May 2018). There is a vast web of review fraud. Merchants pay for positive reviews. Sellers trying to play by the rules are struggling to stay afloat amid a sea of fraudulent reviews and Amazon is all but powerless to stop it. This article: Her Amazon Purchases Are Real. The Reviews Are Fake. by Nicole Nguyen (Nov. 2019), profiles a woman who gives 5 star reviews in exchange for keeping the items for free. One take-away is that this activity could be detected by Amazon, if they cared.
- Even the FTC is involved. FTC Brings First Case Challenging Fake Paid Reviews on an Independent Retail Website (Feb 2019)
- Don't Get Duped! Here's How to Spot Fake Reviews on Amazon by Michael Tedder for Money magazine (March 2021). Some red flags: a flood of reviews in one day and aggressive positivity. Also, click on the profile of the person who wrote a review. If their profile is empty or was created the same day as the review, that's suspicious.
- Another reason not to trust Amazon reviews, from one of the above articles, was the story of a one-star review that was removed by Amazon after
the buyer got a refund. The buyer could not get Amazon to restore the bad review.
- Fake Helpful Reviews: Also from the above article - some sellers hire people to hit the 'Helpful' button on a particular review so that it appears first.
- Spotting fake reviews is a skill we all need to learn. Which? magazine has a short video (April 2019).
- How to Spot Fake User Reviews: Amazon, Best Buy and More by Louis Ramirez (Feb. 2018)
- Is It Really Five Stars? How to Spot Fake Amazon Reviews by Joanna Stern (WSJ Dec. 2018).
- ReviewMeta is a website that analyzes Amazon product reviews and filters out reviews that look unnatural. It also recommends similar products
with trusted reviews.
- The Review Index also analyzes reviews looking for fakes.
- The good news about fakespot.com is that it analyzes reviews at Amazon, Best Buy, Sephora, Steam, Walmart, TripAdvisor and Yelp. The bad news is that it used to be a website, but it is now a browser plugin that is able to read the content of every web page you view. Because of this, only install it in one browser and only use that browser for shopping in the few stores it can analyze. And never buy anything in that browser.
- BAIT and SWITCH AMAZON REVIEWS
Another type of fake review is one for a different product. Sellers take an existing product page, then update the photo and description to show an entirely different product. The goal is to retain the existing good reviews from the original product. Suggested defense: read the god and bad reviews and some old reviews. Just relying on the star rating and the number of reviews leaves you vulnerable to this scam.
- Here's Another Kind Of Review Fraud Happening On Amazon by
Nicole Nguyen of BuzzFeed (May 2018).
- Hijacked Reviews on Amazon Can Trick Shoppers (Consumer Reports Aug 2019)
- Amazon still hasn’t fixed its problem with bait-and-switch reviews by Timothy Lee of Ars Technica (December 2020). A product has 6,400 reviews and a five-star rating. But most of the reviews are for a totally different item. Lesson: always check the most recent ratings. Three cases of this were brought to Amazon's attention by Ars Technica and they fixed only one.
- In Nov. 2021, Brian Krebs ran across an instance of this and tweeted: "So, searching for blood pressure monitors on Amazon is fun. None of the reviews seem to be about the actual product. Not sure if this just a glitch in the matrix or what. I'm used to inauthentic reviews, but this is a new one for me." Many people who responded said that they had seen this happen too. Interestingly, within a few hours, Amazon had removed all the reviews for the item Krebs referenced.
- DEFENDING YOURSELF
- Batteries: Test them immediately. This is a lesson I learned the hard way. In January 2020 I bought a package of AA Duracell batteries. In April 2020, I opened the package only to discover that they were all dead. The package claimed that the batteries last 10 years in storage. The batteries were dated March 2028 and they were sold by Amazon.
- Before buying from an unknown seller, be aware that you probably have no recourse for defective products. More here (Kate Cox July 2019)
and here (Louise Matsakis July 2019).
Sometimes, as seen here, it costs only 4 cents more to buy from Amazon.
- From Nicole Nguyen: Do a search to see if the company selling the product has a legitimate website. Also check if the item has been reviewed by a publication or site dedicated to consumer products. And, Here's One Way To Tell If An Amazon Product Is Counterfeit by Nicole Nguyen of BuzzFeed (March 2018).
- What to Do If You Think Your Amazon Purchase Is a Fake from The Wire Cutter (Feb 2020)
- Maybe don't buy dishes from Amazon. In April 2023 I purchased a single place setting which consisted of 4 dishes in a box. The box from the manufacturer was placed in a larger Amazon box and sent to me. Surprise, one dish arrived chipped. A few days later I again purchased a set of dishes, but this time from a major department store. Again, the original box from the manufacturer was shipped in a larger box, but the department store put lots of padding between the two boxes and all the dishes arrived in perfect shape.
- In July 2016, I wrote Defending yourself from
Amazon.com which makes the case for having a dedicated Amazon email address.
- CUSTOMER SERVICE
Contacting Customer Service is never easy, with any company.
- Website: Log in to your account -> Click your name in the top right corner -> click on Customer Service -> click the "Something else" button ->
click the "I need more help" button -> this opens a Live Chat window from which you can do a text chat with a person. You can also type "Talk to a representative"
into the chat system to speak to a person.
- Phone: 888-280-4331 should be available 24x7
- Email: email@example.com
- Twitter: @AmazonHelp
- Sidewalk: turned on everywhere on June 8, 2021. In the Alexa mobile app turn it off with: Settings -> Account Settings -> Amazon Sidewalk. You can either turn it off
entirely or leave it half on with: Community Finding which lets your devices use Sidewalk but turns off locating sharing. (June 2021)
- Does Amazon know your Wi-Fi password? They want to save it to make setting up new Alexa devices easier. To check, login to Amazon, click Accounts & Lists at the top of the page, then Your apps and devices, then go to the Preferences tab, look for the Saved Wi-Fi Passwords section.
- Pricing: Tweet by Brett Glass on July 24, 2020: "Wow; @amazon must really think it’s customers are dupes. It just doubled the price of yet another item right after I 'subscribed' to it." I have no confirmation of this.
- Data: You can request the data Amazon has stored about you. Episode 165 (April 10, 2020) of The Privacy, Security, & OSINT podcast discussed this and offered this link: How Do I Request My Data? The show warned that Amazon requires a phone number, they send a text with a PIN code to the phone and they store the phone number as part of the account information.
- A security hole: A stranger's TV went on spending spree with my Amazon account – and web giant did nothing about it for months by Shaun Nichols Oct. 2019. Smart TVs and Roku devices do not appear in the list of devices associated with your Amazon account. Yet, each can be used to buy stuff. This story is about a Smart TV that was making purchases billed to someone who did not own the TV. How it happened is a mystery. Changing the Amazon password and 2FA did not stop the TV. There is no real defense. The response from Amazon was quite poor.
- Good news: Amazon offers both free Trade-in and Recycling of old electronic devices. Amazon Has a Free Recycling Program For Electronics That Everyone Should Try by Luke Bouma of Cord Cutter News. April 10, 2023. Among the items you can recycle are e-readers, tablets, keyboards, mice, video games, consoles, cellphones, fitness trackers and smart home devices. See the Amazon page on Recycling Your Electronics.
- January 30, 2023: The Junkification of Amazon Why does it feel like the company is making itself worse? by John Herrman for New York Magazine. A big sky look at Amazon's business and why it feels worse. In the opening example, the author searched for 'spatula' and there were 81 buyable products on the first page of search results. 29 were ads. Quoting: "Why does it feel like Amazon is making itself worse? Maybe it’s slipping, showing its age, and settling into complacency. Or maybe ... everything is going according to plan."
- House panel flags Amazon and senior executives to Justice Department over potentially criminal
conduct by John Wagner and Cat Zakrzewski in the Washington Post (March 2022). The article starts: "A bipartisan group of House Judiciary Committee members has alerted the Justice Department to 'potentially criminal conduct' by Amazon and senior executives in relation to a committee investigation into competition in digital markets." This is a significant escalation of lawmakers' years-long questioning of statements made by Amazon executives.
- Amazon suppliers linked to forced labor in China, watchdog group says by Louise Matsakis of NBC news. (March 2022). Amazon declined to comment on the specific allegations.
- "Millions of people's data is at risk" - Amazon insiders sound alarm over security by Vincent Manancourt for Politico (Feb 2021). Three former high-level information security employees warn that the company's efforts to protect the information it collects are inadequate. These employees were sidelined, dismissed or pushed out of the company. The corporate culture at Amazon prioritizes growth over other factors. Amazon has a poor grasp of what data it has, where it is stored and who has access to it. They found hundreds of thousands of instances where former employees still had system access. Amazon denies it all.
- You Might Be Buying Trash on Amazon - Literally by Wall Street Journal (Dec 2019). After becoming aware of dumpster divers selling discarded garbage on Amazon, the reporters did just that. It was easy. Amazon did not ask about the origins of the stuff they sold or, for food, the sell-by date. Warehouse workers are supposed to identify problematic products but often there is too much stuff and too few workers, so things get missed, both accidentally and on-purpose.
- Amazon Alexa is in the Voice Assistant section
| This page: 8 views per day (over 413 days) Total views: 3,260 Created: August 6, 2022|
Copyright 2019 - 2023