Police in South Carolina have been investigating the life of Todd Kohlhepp -- and in the middle of that search, they found disturbing details about his life.

Kohlhepp is accused of kidnapping Kala Brown and killing her boyfriend, and he may be linked to the deaths of up to seven people.

While looking into his activity on the internet, officials found chilling reviews on what they believe to be Kohlhepp's Amazon account.

A four star review for a knife reads, "havne't [sic] stabbed anyone yet... yet... but I am keeping the dream alive and when I do, it will be with a quality tool like this..."
. . .
Full story at: https://www.aol.com/article/news/2016/11/07/police-find-amazon-reviews-left-by-alleged-killer/21600551/?ncid=txtlnkusaolp00002423

For those that missed it, Amazon quietly introduced a new Prime feature, called Prime Wardrobe, back in June of 2017.  It's similar to the various fashion delivery services, where you get shipped a box of clothing to choose from.  Unlike the various services, you get to pick what's shipped.  An article about the beta launch can be read at https://techcrunch.com/2017/06/20/amazon-prime-wardrobe/  It even includes the return label for easy return of the items you don't want to keep.

I noticed today that it's now showing up on the front page of amazon.com (not sure how long it's been there, since I seldom go to the front page). 

Edit - Amazon page is at >>here<< and according to it, it's still via invitation only.  I never requested an invite, but am seeing a "You're Invited" banner   

Did you think the reason Chinese vendors get to ship to U.S. so cheaply is because of subsidies from Chinese govt? Think again.

From the article: as a result of this shipping fee imbalance, it's estimated that 25% of the 3P marketplace on Amazon is made up of vendors from China. 

https://www.forbes.com/sites/wadeshepard/2017/11/05/how-the-usps-epacket-gives-postal-subsidies-to-chinese-e-commerce-merchants-to-ship-to-the-usa-cheap/

Just saying Hi and updating on what's going on. Finished with shows for year. Now gotta report for jury duty today. Hope everyone's been doing well.

Just got an email from USPS about this and thought I'd share.   Who's buying, what, and why.

All of this is worth a read, for it does provide some valuable insight as to what consumers are wanting out of a website.  One of the biggies is people being worried about their financial data being secure. Which is something I've noticed with many sites - their failure to communicate what sort of steps they have taken (if any) to keep the customer's card info secure.  With many sites it's hard to tell at the time of submitting the info whether the card info is being emailed to the company for manual charging without even being encrypted, if it's being saved to the server, or if it's being securely passed through a gateway at the time of purchase and not being stored.  Some of it is also a bit of a chuckle (see China section for what I mean  )

According to a PayPal/Ipsos trends report:

Brazil
67% of adult internet users bought something online. 45% of them shopped on international sites.
The top categories of items they bought from international sites were:
    Clothing, Footwear, and accessories
    Cosmetics/beauty products
    Consumer electronics
Reasons they bought from international sites they purchased from:
    Free shipping
    Safe way to pay
    Customer support in their language
Reasons they abandoned a purchase from an international site:
    Shipping charges too high
    Delivery time too long
    Concerns about web security

Canada
62% of adult internet users bought something online. 63% of them shopped on international sites.
The top categories of items they bought from international sites were:
    Clothing, Footwear, and accessories
    Entertainment/education (digital)
    Travel & transportation
Reasons they bought from international sites they purchased from:
    Free shipping
    Lower overall cost to buy items from another country
    Costs shown/payment possible in their local currency
Reasons they abandoned a purchase from an international site:
    Shipping charges too high
    Having to pay customs duty, fees, or taxes
    Currency conversion rate not favorable

China
84% of adult internet users bought something online. 26% of them shopped on international sites.
The top categories of items they bought from international sites were:
    Clothing, Footwear, and accessories
    Cosmetics/beauty products
    Grocery, food, drink, alcohol
Reasons they bought from international sites they purchased from:
    Secure way to pay
    Proof of product authenticity
    Costs shown/payment possible in their local currency
Reasons they abandoned a purchase from an international site:
    Delivery time too long
    Difficult process to return items
    Concerns about security of financial or personal details
    Delivery shipping costs

Other countries listed in the article are: France, Germany, Japan, Russia, UK
Full article at: https://www.uspsdelivers.com/cross-border-e-commerce/

For those that don't know, Amazon has a new method of payment called Amazon Cash.  You go to any CVS, GameStop, or one of a few other retailers, show them a barcode that links to your Amazon account, they scan it, you give them however much you want added to your account, and it gets loaded onto your Amazon account.

It's exactly like buying an Amazon gift card, except you don't have to go home and type in the code in order to get it added to your Amazon account.

This is part of their plans to try to lure more of WalMart's customers away, to try to increase their lower income customer base.  However, I really don't see how it's any more convenient than typing in the card's number when you get home. In fact, it seems more of a pain since you don't always have your phone with you when you go into a store, and if you're lower-income (or really poor) you might not even have a smart phone.  So I just don't get it.  The only benefit I see is that the stores don't have to stock a physical pile of Amazon gift cards.  But there's ways around that as well. For example, they could key in the phone number that's linked to your Amazon account (which could be a landline or a cell #) *shrug*

That being said, in order to get people to try it, they're offering a $10 credit if you will use it to add $20 or more to your account.

The $20 can be paid using a variety of payment methods. You can pay with cash, debit card, credit card, gamestop trade in credits (if at a gamestop, of course), and any other payment method that the store will regularly let you use when buying an Amazon gift card.  Note: you cannot use gift cards (such as GameStop gift cards or CVS gift cards) and some store clerks have refused to allow people to use their credit card or debit card, despite the fact that you can.

Get your barcode for your Amazon account at https://www.amazon.com/gp/browse.html?&node=16955883011

$20 must be added to your account by July 31st.
$10 promo credit will expire August 31st.
Promo credit will only work on items sold by Amazon.com


Also a very handy link - Ever get told by Amazon customer service that they're going to give you a promo credit for whatever reason and you want to confirm that they actually did, since they mess up so frequently?  Most promo credits can only been seen by adding an item to your cart and then going to the checkout system, but there's a better way.  Sign in to Amazon,  go to https://www.amazon.com/gp/product/features/unbox-process-gcpromo.html?&getBalance=1&showMobileApps=1&useAUI=1, and it will show you all of your current promo credits.

So, as most of ya know, when I was selling ecig stuff, I examined a few different options, settled on Magento, and really liked it.  The only real problem I had with it was that my VPS host didn't have their server optimized for Magento, causing it to be slow at times (even kicking out some timeout errors) and any optimization of the server was up to me to deal with.  And, at the time I couldn't readily find a host that was focusing on Magento, except for a couple of very high priced ones.

My current host and software for jewelry site is no longer PCI compliant, due to the newer encryption and connection requirements and I've had it turned off for awhile until I could sit down and take the time to figure out what I wanted to do -- change software but keep host after getting host to update server, change hosts and get software patched, change both host and software, go to a fully managed ecommerce site such as shopify and move email hosting to godaddy, or what.

Well, I've done lots of looking and pricing and digging and finally settled on Magemojo for a host.  Their servers are configured to be fully PCI compliant, they focus specifically on hosting Magento stores, they will set up Magento for you and assist with your move from your current host, are reasonably priced (starter VPS packages are $58/month), include email server hosting, and so far I've had a good experience with their tech support.  They respond to all tickets promptly (claim 15 mins or less), 24/7.  On my current ticket they responded within 9 mins and their responses are in readable english!  They also have several Magento-related help pages available for their customers, saving both them and the customer many a headache.

While it's too early for me to give them a full review, if you're looking for a new host for an ecommerce site, you might consider Magemojo.

I'll try to remember to update this thread as my customer experience with them continues.

The most secure protocol for sharing information on the web today is Transport Layer Security (TLS) version 1.2. PayPal enabled support for TLS 1.2 for all secure connections and last year began requiring its use. If you haven't already done so, you will need to verify that your environment supports TLS 1.2 and if necessary make appropriate updates. PayPal is updating its services to require TLS v1.2 for all HTTPS connections by June 30th of this year (2017). After that time, all TLS v1.0 and TLS v1.1 API connections will be refused.

These updates are part of an industry-wide initiative to improve security standards. Some of these updates, like the TLS upgrade, are mandated by the PCI Security Council and are required by every website that transmits or processes cardholder data.

Merchants and developers may have to update their applications and integrations in order to be in compliance and ensure that their applications continue to function as expected.

Src: https://devblog.paypal.com/upcoming-security-changes-notice/

For more information please visit:
https://www.paypal-knowledge.com/infocenter/index?page=content&widgetview=true&id=FAQ1914&viewlocale=en_US

The deadline for all merchants to stop using SSL and TLS 1.0, and be fully switched to TLS1.1 (or higher), and still be PCI compliant, is June of 2018 (the original deadline was June of 2016) https://www.pcisecuritystandards.org/pdfs/15_12_18_SSL_Webinar_Press_Release_FINAL_(002).pdf

In addition, the PCI Council has stated that web browsers will begin prohibiting SSL connections in the near future.

The other part of this is that there are tons of people out there still using older browsers, many of which can't even use TLS1.1, much less TLS1.2.  For example, IE versions prior to v11 either can't natively use  TLS1.1, or don't have it enabled.  All of the people still using XP and Vista?  Even if they update to IE9, they don't have TLS1.1 capability, much less TLS1.2.  IE in Windows 7 & 8 has access to both, but they're disabled by default unless the user updates to IEv11.   A complete chart of browsers and what versions of TLS they have can be found at https://en.wikipedia.org/wiki/Transport_Layer_Security#Web_browsers

To enable TLS1.1 & 1.2 on your browsers, the U.S. State Dept. has easy to follow directions.  The directions are actually for enabling TLS1.0, but it gets you to the right spot for enabling 1.1 and 1.2.   https://travel.state.gov/content/dam/aa/pdfs/directions_for_enabling_tls.pdf

You can also check your browser's TLS capabilities by viewing the page at https://www.ssllabs.com/ssltest/viewMyClient.html

Are you experiencing problems getting the Amazon Alexa app to load?  Does the circle just keep spinning around and around?  Are you just getting a blank screen?  If the app just sits there with the loading icon spinning, it's a cookie problem.  The same is true if you can't get the alexa webpage http://alexa.amazon.com to load.

 If you're experiencing this on the Alexa app, open the Amazon shopping app and logout.  If that doesn't fix it, open your other Amazon apps (Amazon Kindle app, Amazon music app, etc) and logout of those. 

If you're experiencing this on the website http://alexa.amazon.com, open the main Amazon webpage at http://www.amazon.com, hover your mouse over your name on the right hand side, wait for the menu to appear, and click the bottom line that says "Not <your name>? Sign out".  Once that's done, try again to get http://alexa.amazon.com to load.

This cookie bug appears to be very pervasive, so if you use the app or the webpage frequently, you'll find yourself needing to pretty much always stay logged out of the main Amazon website and app.

Just saw this on Clark Howard's website.  If you're on govt assistance, you can get Prime for $6 a month instead of the $99/yr price.  http://clark.com/shopping-retail/amazon-prime-ebt-discount/

Those with a valid Electronic Benefits Transfer (EBT) card are eligible. An EBT card is used to disburse funds for these government assistance programs:

    Temporary Assistance for Needy Families (TANF)
    Supplemental Nutrition Assistance Program (SNAP)
    Women, Infants, and Children Nutrition Program (WIC)

According to the article, Amazon hopes this will attract people who primarily shop at WalMart and other discount stores.