Friday, September 1, 2023

Bloky ‑ (Not) Protect your Store and other Shopify Protector Services

Web Content Protectors:

While I was searching for images for a reverse Google search to find products, I encountered a particular webpage that caused some annoyance. It happened to be a website hosted on Shopify. Whenever I attempted to access the developer tools to inspect the images, the page would swiftly redirect to a blank page or revert to the previous page.

Clearly, this behavior was a result of some JavaScript code attempting to discern my intentions, despite my genuine lack of any malicious intent. My sole purpose was to conduct product research, and I had no intention of pilfering any information or images from the site. Fortunately, Chrome provides an option to disable JavaScript for specific websites under "Privacy & Security" -> "Site Settings" -> "JavaScript," allowing me to add the problematic website to the list of sites not permitted to use JavaScript. This simple adjustment allowed the site to load without issues, granting me full functionality.

The irony lies in the fact that this service is marketed as a solution to prevent data scraping. In truth, many scrapers avoid loading JavaScript on the pages they target, and those that do use JavaScript are often searching for precisely the kind of code that interferes with user actions. If data collection was the aim, there exist straightforward workarounds for these measures.

The $10 per month service may indeed deter less tech-savvy individuals from copying images or text, but it's fairer to say that those purchasing this service are likely being deceived. In reality, there is no foolproof method to prevent such actions from occurring.

Thursday, April 25, 2019

Legally Getting out of a Door-to-Door Company Contract

Disclaimer: This post is an opinion article and is not legal advice. If you need legal assistance, please contact an attorney directly. 

The Door-to-door Salesperson

Most of us in some way connect and sympathize with door-to-door salespeople. They are out in the elements, working hard to put bread on their tables. The conversation begins with a smile as the salesperson wants to ask you a question or show you something or asks you for a favor. Then comes the pitch. Possibly doubt creeps in as we try to weigh out the situation, ask questions, and peruse the contract, we gain confidence and sign.

A few days later we see the bill on our credit card or bank account and you start to worry, possibly even feeling a little buyer's remorse. You call the company to cancel your contract as your salesperson said you could do if you weren't 100% satisfied. As you talk to the manager, they explain that the contract you signed locks you in for the long haul and if you want to get out, you have to pay 1/3 of the final cost upfront. Your blood begins to boil. The salesperson was so kind, funny, and warm-hearted. They said you could basically cancel whenever you want with no penalty, right? What a liar! What a thief! How could they have deceived you so?!

Well, now what? It's a legal contract. The fine print mirrors the brisk language of the manager on the phone. If you keep going it will cost you thousands, and if you cancel now, it will be a 1/3 of that.

But maybe there is still hope yet.

Option 1: A Loophole

Many people just don't know that in some cities around the United States, the door-to-door salesperson is required by law to get a license or badge allowing them permission to go door-to-door in your city. If they didn't get one, there is a good chance that the company illegally approached you in the first place. Call your city and find out if the salesperson/company got permission to sell door-to-door in your city. If not, you could call the company and threaten them with this information or provide this information to your lawyer.

From my experience, asking about a city-provided license is a great way to get the salesperson off the porch and on their way. You might even save your neighbors some headache.

Option 2: Lawyer Up

Some people find litigation to be scary. To be frank, good lawyers are there to help you and protect you. Don't get me wrong, they can be expensive but you can find reviews online, get referrals from friends and neighbors, and shop and compare lawyers. Almost all of them should be able to give you an estimate up front before any payment is required. A stern letter from a firm can go a long ways when the company would rather avoid the financial loss of a lawsuit.

Option 3: Make a Stink

Companies with shady practices are ultimately about the money. If you don't like how they have treated you, tell the world about it. Go online to social media and company review sites and tell others about your experience. Make sure to post certain details so people can identify the company you are talking about and can factor your opinion in to their decision. Some companies might threaten legal action for defamation if your stink is bad enough. Don't worry about contacting a lawyer unless they actually serve you at which point certainly get a good lawyer to protect your first amendment rights. Chances are, their bark is worse than their bite. Not only because it just means more money (a lot more than 1/3 of a thousand dollars) but also because if they are actually dumb enough to try that, you could potentially also tell the world about the lawsuit which in turn hurts that company worse.

Option 4: Lease Takeover

Some contracts are lease agreements which sometimes allow a new person to assume the remainder of the contract. Just because you didn't like the company or the product doesn't mean that someone else wont either. You can find people to lease your contract to online.

If They Cancel, Great! But one more thing.

Make sure you get everything in writing (and recordings)! Just like the contract that got you into this mess, you can only truly cancel a contract if you have it in writing. Documenting everything can also assist you if legal action becomes necessary. 

Last-Minute Tips:

- Almost nothing you can buy in life is going to pass you by if you don't act fast. And if they do, it's definitely something you don't need. Never make quick decisions!

- Always get a business card with the Salesperson's information. Also obtain any brochures or documents about the company, company locations, etc.

- Ask for a city-issued badge or license showing that the salesperson has been permitted by the city to sell there. If you're not sure, contact your city office to find out the rules.

- If your worried for your safety or feel harassed by the salesperson, call the police.

- Never let door-to-door salespeople into your home. It's possible some are sex-offenders getting these jobs due to the lack of process in hiring. Protect yourself and your domain!

- If you don't feel safe, don't open the door. Just keep it locked and walk away.

- Never feel awkward asking the salesperson to wait outside while you go research the company and product online. You could also give them the option to come back later. If they protest you going online to do research, excuse yourself and walk away.

Other Resources

Here are some other good resources for getting out of contracts depending on what you purchased. 

Wednesday, April 27, 2016

Disneyland 4 Free Tickets: Facebook Scam

Scam Score: 100 (Severe Risk)

Background
Recently I found this being shared on Facebook. It appeared quickly as an obvious scam but I followed the link to see more evidence of the scam.

You can see quickly that the coupon was composited in a hurry and without much thought to design. The most important parts to Disney is going to be their logo, which is obviously skewed in this picture. This picture also happens to be click-bait as it does not appear on the landing page.

http://www.disneyland.com-present.com


The landing page greeting the clicker displays all the common elements of a scam. A poorly designed web site, which Disney would never put their name on. A tickets remaining countdown (which randomly resets to one of several different numbers on refresh) to encourage quick action by the user, but is nothing more than some JavaScript.

While the site appears to be on behalf of Disney, there is no listed responsible party of who would handle the prizes.

The button for redeeming your exclusive gift card is set to alert that you have not completed step 2.

Looking at the source of the page is appears that the developers were German.

The URL (http://www.disneyland.com-present.com) is meant to be deceiving as well. The root of the domain is actually com-present.com which is obviously not owned by Disney and has private registration.




Tuesday, November 3, 2015

Amazon.com Scam: ChiekoLtd@gmail.com

Background:
As I was looking through various items on Amazon, I came across a very nice and expensive camera that was listed at $3,000 less than all other postings. The description said the camera was new and never used. The grammar and punctuation were terrible. The description concluded with specifying that all buyers should contact ChiekoLtd@gmail.com before ordering.

Seeing as how this is not normal Amazon behavior and in fact violates their policies, I decided to look up the company online (they appeared reputable and have been around for a while) and contact their support staff directly.

Their staff later responded saying that the listing was in fact due to their Amazon.com account being hacked. The company regained access to their Amazon account and removed the product.


Curiously I used a junk email to contact ChiekoLtd@gmail.com asking about the item and why it was listed with such a large discount. I got the following email in response:

Hello,
I will explain in this email all terms and condition
The [Item Listed] is BRAND NEW, never used, ( US model, not grey market),
but Amazon does not let us list it as new. The product is Sealed in its original box and comes with full Warranty,
receipt, all manufacturer supplied accessories...
The total price is $1,400.00 including all shipping taxes if you are in US and for international shipping you have to
pay extra 29,99 $ (outside US) .
If you want to buy, send me your phone number, full name, shipping address and I will contact Amazon asap to process
your order. Dispatch is by normal UPS Services, which takes 1-3 days depending on where in the US you are.
My return policy is full money back in 30 days.
For more information don't hesitate to contact me!
Many Thanks
As you may notice, the grammar and punctuation continue to be very unprofessional. The English is broken and they can't make up their minds how to write currency amounts. If this was a legitimate sale, Amazon would provide the information the company needed following the purchase through Amazon.com. They would not need to request it by email.

Last, the author if the email failed to provide any kind of professional footer. No name, no position, and no website.  Make sure you always keep purchase and communication within the sale platform! 

Thursday, January 8, 2015

Prescription Assistance Services: Is it a scam?

Background: 
In the mail recently, I received a letter and pharmacy discount cards for a company called Prescription Assistance Services. The letter spells out the terms of these cards as pre-activated, and no fee discount cards. We've seen something very similar before with RX Relief Pharmacy Discount Card / Healthcare Alliance.

My words of caution still hold true as I mentioned in the RX Relief Pharmacy Discount Card / Healthcare Alliance article, be weary of how your information is being used. Companies don't spend a lot of money marketing these for nothing.


Monday, November 24, 2014

Email: Center Security (noreply@facebookalert.com) Scam


Scam Score: 85 (Severe Risk)

Background: While reviewing emails in my inbox, I came across an email that was intended to look like Facebook warning me that a charge had been made on my account for 22.34 USD.

The link provided for me to login to "Facebook" actually resolves to http://74.7.88.163/aboutes.php which is obviously not Facebook. This server also appears to be hosting the websites: websiteincomesuccess.com, www.leidschdagblad.nl, and www.tweetprocesor.com which are obviously not owned by Facebook and seem sketchy themselves.

This email fails our tests by first, not identifying me personally. If anyone knows my name, it is Facebook (or at least the name I provide them). Second, the grammar and punctuation in the email are not professional. Third, the email is supposed to be from Facebook but the message ends with a reference to PayPal Security. PayPal and Facebook are not the same company. Purchases notifications from PayPal will never be from a Facebook email.







Net-Scams Scam Scores

New Scam Scores!

To quickly summarize the legitimacy of scam, we will now be supplying a Net-Scams Scam Score. This score builds on top of the existing rules we previously established and sums a score from those rules.

50 pts ~ Responsible Party
In all legit offers and giveaways, there will always a person or company held responsible for fulfillment of the prize. This company may or may not also handle inquires of possible participants. This responsible party must uphold their end of the agreement.

20 pts ~ Regulations and Tax Requirements
Do not account for US tax requirements and regulations

10 pts ~ Professional Conduct
Poor grammar used through out the site

10 pts ~ Server Location
Servers located outside the United States are not able to be governed by US law. This applies a sense of distrust.

10 pts ~ Other
This includes usage of Non-English languages in an English
Russian language used on the site


By adding points of each qualifying rule, we can derive a risk score of each potential scam:

 0 - 20 pts - Low risk
20 - 40 pts - Medium risk
40 - 60 pts - High risk
60 - 80 pts - Extreme risk
80 - 100 pts - Severe risk, extreme caution advised!

 
Design by Free WordPress Themes | Bloggerized by Lasantha - Premium Blogger Themes | Bluehost Review