CassandrichFeb 26

PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize. Attack works like this:

Stalker who wants your address opens an Amazon seller account and lists themselves as a third party seller for any item on your public wishlist. Then, they order the item from themselves as a gift for you. Bam, they have your address.

In particular, attack does not depend on an existing third party seller having poor PII handling hygiene, like the articles have implied.

Show threadSonLite
@dalias Again I Think logistic companies coming as intermediaries can serve to shield our Addresses since only their addresses will be given
Feb 26 at 5:06pmWeb
Show threadPasswordsarehard4Feb 26
@SonLite @dalias if they hide an AirTag inside the box it will track the whole route. They just need the places it stopped, one of them will be where you opened the box and then threw it away. It might not be where you live but it’s probably where you’re sleeping.
Show threadRootbrianFeb 26
@passwordsarehard4 @SonLite @dalias Airtags can be reprogrammed if they were found in a box (I don't just throw away boxes without checking for tech or magnets).