How The” Penny Auction” Scam Works

Recently there has been a rise and fall of several penny auction sites boasting about selling genuine high-demand items at massive discounts off recommended retail prices.  But all is not what it seems.

The secret to this scam is that you must pay money every time you make a bid!

And every time a bid is made, the timer for the auction increases a little bit, usually by about 10 seconds. So you have a $1000 camera with a bid for $150 and its got 6 seconds left, but nope, someone else makes a bid and extends the timer by 12 seconds or so, and then another, and another and this can go on for hours.

How much each bid costs varies, but usually they will front-bill your credit card (when you signup) for 200 bids for, say for the sake of argument $100. Many people often complain that the charge to their credit card is under-played and not obvious until its to late. Usually, getting refunds from Penny Auction operators is like trying to get blood out of a stone. (Although this practise itself is not a scam; it is definitely misleading).

Now is where the trouble starts.

The thing that most people don’t understand (and where the scam kicks in) is that penny auction operators are allowed to shill their own auction’s bids. They typically do this because;

  1. The price is too low
  2. If not enough people have big on the item

In other words, if the money paid by either the actual bid, or the charges made to the sum of people bidding is LESS than the cost of the item, the site will simply start bidding on its own behalf to push up the price (and extended the duration).

The other dangerous part of the penny auction is that the site operators are allowed to sell your browsing habits and personal information with third-parties, often with those that helps the operator perform “services”.

So with every bid effectively being charged to a credit card; each individual bid (with the obvious exception of the shill bids) subsidises the price of the equipment for the person who eventually wins the item and whom musty pay not only the price they bid, but also for each bid they made.

Sure, some people do actually win very cheap items. But for every individual auction there are several losers making up the difference in price (and who receive nothing). And since the auctioneer can bid against you, no item need actually be sold until the auction site has made a huge profit on that “cheap” item.

Fun Facts from a “Swipe Auctions” example:

 

By the time the auction ended (5 hours later than the first image at the top), the camera in the Swipe Auctions auction pictured had had another 13,105 BIDS!!

At using an EXTREMELY conservative estimate of 5 cents a bid, people still spent $1,283 on bids alone (probably closer to $2,500), and the guy who won had to buy the camera for $256 on top of whatever he spent on bidding.
Only 1 person won that camera auction, and only after spending several hundreds in bids.

Several people lost this auction and threw their money down the drain and wasted several hours of their lives.

There is no way to know if Swipe Auctions extended the auction superficially on their side in order to make more money (is it a coincidence that it ended so abruptly so early (11:00pm), but right after they cleared over $100 in bids (AT LEAST) over the MSRP of the camera?)

For the record, Swipe Auctions no longer exists (and they had actually launched dozens of ‘sister sites’- I have no idea if any of those are still in operation). But this article is written in the hopes that I can protect people from falling into these dodgy sites who aim to take your money and give you very little if nothing in return.

Tunnelling Your Way Through the Government’s Metadata Retention Laws

If you happen to be fortunate enough to have access to a Unix based web server (such as an EC2 or Linode) machine) you will surprised how easy it is to safely browse the web – circumventing the Australian government’s 2 year mandatory metadata retention laws.

t_29_0You can use an SSH tunnel to use your off-site server as SOCKS Host. A SOCKS Host (or Server) is a general purpose proxy server that establishes a TCP connection to another server on behalf of a client, then routes all the traffic back and forth between the client and the server. It works for any kind of network protocol on any port. Because the connection is secure, only the client and the host can access the the data.

This is how is circumvents Government spying. The only connection your ISP can see is the initial tunnel made to the server. All the delivery of websites etc through that connection are invisible to them (and the government).

It’s tragically easy to setup, simple initiate a SSH connection with dynamic application-level port forwarding, like this:

ssh -D 12345 user@your.server.com

And then, tell your browser that you want to use a HTTP SOCKS 5 Host for proxying (Options > Advanced > Connection Settings for Firefox):

Screen Shot 2015-11-03 at 1.52.46 PMUse manual proxy configuration; set it to SOCKS v5 on the same port you specified as forwarding.

Be warned however, while your Internet traffic will be encrypted and invisible, your DNS lookups will still be public. Firefox has a setting called ‘network.proxy.socks_remote_dns’ which you can enable by browsing to the address ‘about:config’ and searching for the string above.

Lastly, be warned that browsing this way will slightly decrease speed of your browsing – but this may be a small price to pay, and may not even be noticeable.

While this is all trivial for Linux and OSX users; Windows users will need to jump through a few more hoops. This blog post inspired and references an excellent Linode Guide which covers things in more detail, and includes instructions for Windows users using Putty.

Downloading Blackboard Unit Course Content for Offline Viewing

Blackboard is a great tool for completing college courses online, but sometimes you can get stuck without the internet making it difficult to study. There is a way however, to use a command line tool wget to download the site content for local, offline viewing.

It should be noted however, that this method is unlikely to be endorsed by your college – so use at your own risk!

To download the content for offline viewing you need two things (in FireFox):
1. Install the Firefox Cookie Exporter
2. Install wget

Use Cookie Exporter to export to cookies.txt

-the next command will download all the course material after loading the cookies.txt

wget -mk --no-check-certificate --load-cookies cookies.txt https://link.to/the/course/CODEE_LEE7/Content/

If you use this method to download from courses with lots of content you may want to consider inserting “-w 20” into the wget command, which tells wget to wait 20secs between downloads (give the server some rest otherwise you may get booted).

Syncing Google Contacts with iMessage (and Contacts) on OSX Mavericks

You may remember earlier in the year I took issue with the super secret hidden checkbox in the Mountain Lion’s version of Contacts which magically syncs your Google contacts with OSX Contacts and Messages. As it seems, Apple have finally fixed the SSL problem stopping you from syncing through the Google option in System Preference’s Internet Accounts setup.

Getting the sync to work now is as trivial as adding a Google account to your Internet Accounts list, log in and turn on the items you want to sync. Screen Shot 2013-11-26 at 9.46.42 pmHurray! Easy peasy.

It’s beyond me that it wasn’t like this before.

 

Syncing Google Contacts with iMessage (and Contacts) on OSX Mountain Lion

Being able to sync your Google Contacts with your OSX Contacts is possible – it just takes a bit of digging.

As a long-time iPhone 4 user, I was recently introduced to the wonderful OSX Messages app, which lets me read/send iMessages from my Mac, as if I had sent a text from my phone. Such an amazing thing (even if it does only work with other iPhone users). However, it only used phone numbers to identify contacts; less than ideal since I seldom reference my friends and family by their cell numbers.

I use Gmail for all my email purposes; and after loosing my completely contacts list TWICE from the failures of Windows Mobile 6, I am also a huge advocate for Google Contacts – awesome synergy between my phone list and email contacts. and while I’ve been very happy Syncing my email/calendar/contacts between Google and my iPhone; my Mac just didn’t want to come to the party and I refused to retype my contacts manually.

At first I tried syncing the contacts over Google’s Microsoft Exchange Protocol (which is actually the best way of syncing Gmail/contacts/etc onto the iPhone), however you cannot get the necessary SSL to connect to Google on Mountain Lion. Next I tried backing up my iPhone contacts into iCloud, which also failed.

I was about to give up until I discovered that the preferences for the Contacts app has an option that I didn’t know about. Carefully disguised under the “On My Mac” account, you will find the option to sync with Google.

syncing-google-contacts-in-mountain-lionHurray! Easy Peasy.

iiNet ‘Freezone’ World of Warcraft Patches

Many people in Australia (myself included) are iiNet customers.  Recent acquisitions have made iiNet the third largest ISP in Australia, and I for one, consider them excellent value for money.  One of the features iiNet has as part of its product offerings is the iiNet Freezone, which is a large selection of content which does not count towards your internet quota. Many people are also unaware that World of Warcraft patches (which can be considerable downloads using the Blizzard auto-updater) are available on a 3FL FTP Mirror.  The 3FL gaming servers actually belong to an old iiNet rival ‘WestNet’ but iiNet bought out Westnet a while ago and not many iiNet customers are aware that 3FL belongs to iiNet now – and more importantly – are counted as Freezone servers.  Besides having some very awesome online gaming servers, 3FL also has a great FTP mirror and a Steam Content server (which is also Freezone and I’ve previously covered how to limit Steam to only download games from specific servers).

Games: At Work, No One Knows I am a Wizard

A treant from World of Warcraft

There is still a strong social stigma attached to people who confess to regularly playing computer games in western culture. The lingering stereotype of gamers being solitary male teenagers with poor social skills persists, despite studies showing that the average gamer is 30 years old, and has over 30% chance of being female. The fledgling industry is now breaking into the mainstream, and the rise of casual and social gaming has turned the games industry into a $39 billion per year powerhouse of entertainment. In the next 12 months, this figure is expected to balloon into $55 billion per annum, which is a figure that will rival the international film industry and predicted that it will soon be the preferred and dominant form of entertainment.

The popularity and rise of recent casual and social gaming owes much thanks to the phenomenal success of the Nintendo Wii games console, who’s success is largely the result of it’s ability to not only break through the traditional image of the games industry but to transcend it entirely. The Wii made gaming accessible; making games a social experience anyone could enjoy (particularly families and the elderly) – opening up games to a new and untapped demographic . While not the sole reason, it was one instrumental in the rise of casual and social gaming, which in the past 12-24 months has become a seeming tidal wave of success.

There is a deep psychology to gaming that’s yet to be fully understood. Researchers have found that games provide “sense of freedom and connection to other” and this lets us explore ourselves, our friends, our families, but also complete strangers in way we could never do during a face-to-face interaction. Playing games, particularly online, gives us remarkable insight into other people free from typical social constraints, for example PlayStation’s Smash Up Derby allows users to drive classic motor cars, like the T-Bird; but also drive them at breakneck speeds into other users.

This combination of reality and fiction is deeply stimulating. It also allows us to validate and test our moral systems, since people can be exposed to morally questionable situations that would never arise organically in the real world. Studies also suggest that games make us smarter. Educational games such as Immune Attack (presented by the Federation of American Scientists) provide mental and social benefits to players. Unfortunately, there is also a cost. Games are highly validating, in that they provide a source of fun, thrill, competitiveness and this makes them very addictive; although there is a lack of formal diagnosis in current medical or psychological literature. Unfortunately, the number and frequency of deaths and illnesses resulting from online game addiction continue to grow.

While social and casual gaming can clearly enrich our lives and relationships, we must be mindful of the possible problems when taken in excess.


This post is a slightly modified version of a piece I wrote for a University assignment for the Curtin University Subject Internet Studies 102/502: The Internet and Everyday Life, answering the question: What are the implications of the rise of casual and social games on the internet for online gaming and everyday life?

See more from this unit.

WTF is HTML5 and Why We Should All Care

I saw this tweet today:

#IRONY RT @kevinmarks: I like this ‘what is HTML5’ Infographic: should b a webpage not a bitmap

Now I repost here, in the event it should disappear because I think this is a really good info-graphic and it deserves more exposure…I hence present “WTF is HTML5 and why we should all care”.

The original link can be found here.