CameronDev

If I am understanding right, when you say "can't be bothered", you mean "can't be compelled/forced"?

Seems pretty reasonable, albeit slightly reliant on honesty. At least for scammers, they aren't likely to want it back, as that would deanonymise them, so if its definitely a scam, your pretty safe to keep it.

Thanks for the info :)

Do you know of any countries that have different laws? I'm curious as to how it would work?

The items could also have been purchased with a stolen credit cards.

I had a variation of on of these scams happen to me.

I purchased a pair of headphones on eBay - $50 The box that arrived, was shipped directly from Officeworks, with an invoice for $70, and a business account setup in my name, and a strange credit card. Reported it to officeworks, got to keep the headphones, but likely someone got a $70 charge on their card, and the eBay seller probably got my $50 for free.

That makes even more sense, they probably dont stand out in the crowded market place, but for a few dollars in shipping and lost product, they can get a glowing review to push them up.

Its important to realise that while the item might list for $$$$$, it probably only costs $ to manufacture.

It may be a fake item, but also remember that the cost to make jewelry is usually far less than what they are sold for, so it probably wasn't hundreds of dollars.

I'll update when I find the video, but there was a woman who gave a ~~blackhat~~ defcon talk about it, and she got a coffee machine, so its not without precedence to spend hundreds.

Edit: link https://youtu.be/2IT2oAzTcvU

This is probably a scam:

https://www.uspis.gov/news/scam-article/brushing-scam

Alphonso is listening for TV sound signatures, which while definitely intrusive and privacy invading, is not the same as 24/7 listening for voice-to-text-to-ad purposes.

They would only need to listen for a second or so to determine what channel you are on, instead of all the time, so there is a massive difference in scope.

They are effectively shazaming your TV.

Still creepy and invasive, but not 24/7 recording invasive.

The myaddress+shop@gmail.com should be trivial to defeat by a spammer. Its a very simple string remove/replace to get back to a stock email address, or change it to impersonate another service, eg. myaddress+netflix@gmail.com.

It's only useful for the actual service, after that, you can't rely on it.

"I'd like to offer you a job, we're like a family here"

Family might have a fairly clear definition, but the word does get abused, and it is eating away at its meaning.

Is this not just vscode? Its definitely not eclipse, although from memory that could be served as a webapp through some fancy java to html thing.

watchtime-boosting filler content

Wonder whose responsible for the policies that created that? :D

One way or another, the server that hosts a resource can track who is requesting what. You as the server owner can just as easily track who is accessing what, but if you avoid using a CDN, then it limits the tracker to just yourself. The cost is that you'll have increased traffic, and there is always the suspicion that you may have tampered with the lightbox.js file to do something malicious.

On the self include side, the instructions you linked seem pretty straightforward, so it should be possible to use it that way. What is issue your facing?