OT

like a laptop then...

True, although you get to choose what you sync with the cloud. Having said that the internet is "owned" by google, aws, azure etc, and their subsiduary data brokers, so don't kid yourself what you do on your PC is any less visible.

Well there is some truth to that. But again its still holds for most desktop users as well.

(and at least ISTR Apple have been quite good at resisting attempts by the various US 3 letter agencies to get backdoor access to their data)

Only if you don't have access controls turned on. Phones are somewhat better than most PCs in this respect[1] since they usually have encryption enabled either by default (apple) or as a user selectable option set during first boot and elsewhere. The tight system integration makes it significantly more difficult to extract data from flash without a valid way to login.

It will be encrypted all the time typically.

Most phones don't even have memory cards, and for those that do, encryption is a standard question when you insert and format the card.

As long as it was not setup by a complete incompetent, there are no easy options for someone without legitimate access to get into the device. You also have the option to do a remote wipe of the phone.

Dictating the URL to a helper may be the more expedient way. Then once logged in on the desktop, you can change the 2FA settings once and for all.

They used to host it on the main web site, however there are various third party links to it:

you can certainly log on

just done it

you can add things to a basket

can't verify whether you need it to complete such a purchase

I have nothing I want to buy ATM

In message <s1l1o4$jgr$ snipped-for-privacy@dont-email.me, tim... snipped-for-privacy@gmail.com writes

Have you given them a mobile phone number?

They let me in yesterday using a capcha followed by a mail response.

Once in, I tried hard to find a way of setting up SMS 2FA without success:-(

Why is it you think your phone is trustworthy? Especially if it's an android, given the almost universally poor update provision for them. For that matter, why is it you trust the fingerprint & facial recognition algorithms? Or, and merely as a parting shot, you understand, why is it you assume the guy who might have just nicked your phone doesn't know anyone who can help out?

#Paul

One of the security issues with fingerprint readers is that they still work when you are asleep. (Not a problem if you lose your phone but can be a problem for those in abusive relationships).

If a phone was lost at the scene of a crime are law enforcement allowed to ask suspects to just put your thumb here for a moment?

Surely the same applies to face rec - hold the phone up to a suspects face and job done. Bet they wished they used a PIN now.

OK. To directly quote your good self, you said "on your phone". You did not say "on my phone", or "on Apple phones".

Your use of "your phone" means that what you wrote (even if perhaps not what you meant) was referring to phones used by other people; and (smart)phones used by "other" people are, by a great majority, Android phones.

If you want to make a statement about your own smartphone-based security situation, or about that of those who have Apple phones, then don't phrase it as a general remark that reads as if applicable to (most) other people.

Lastly, another quote:

There is no reason particular to believe that Apple (since they are now brought into the discussion) has notably better fingerprint or recognition than other comparable types of phone.

But what counts here is that they have a better and more tightly controlled security model; so it is that which would have been the thing to menion, i.e. perhaps

"Bullshit with a securely designed and recently updated iphone like mine"

#Paul

I must have done

I got a "the driver is outside your door" text message

So I just went into my account to check my details

and whilst it seems that I can buy things, I can't log onto my account details to inspect them unless I verify myself

by clicking on the link :-(

I've just initiated the process to turn this off

which is sad because in principle I like to have this level of security. But I can't have it, because some numpty company have implement it on the basis that "everyone" owns a smart phone, don't they?

Well No, that's why no-one else implements it this way

That sounds nuts.

Why not vote with feet? You don't have to use this shopping service.

OTOH, if you do, then don't let them store a card number.

If you must, then credit card only, NOT debit. They have unlimited access to ya bank account.

well I will

I use Amazon about once a year

So they have plenty of time to fix it

they aren't supposed to remember the CVV number

and aren't supposed to process an order without it.

Um, I think I trust Amazon not to do that

But it is why I don't sign up to other internet services. Such as those companies that offer you dodgy access to rerun TV programs

I thought they (and other traders) could process an order without a CVV but they had as a result to accept higher charges/higher risk of chargebacks from fraud. I can well believe Amazon do so given their aim is less immediate profit and more world domination.