Recommended Posts

Damn looks like I'll be getting EyePet then :laugh: I read the EU bundle was retailing for like 50/60 euros with camera?! :|

As AT said, I'd like to see how head tracking in GT5 works. Not pre-ordering till after TGS and I see how good it is.

It's cheaper at Shopto (by a whopping 10p) and you won't be waiting for delivery for 1 month :p

http://www.shopto.net/page.php?page=dettag...;codart=PS3EY02

Can't say I've ever had issues with play for preorders although accept they do have them. Got my Limited Edition MGS4 on the day of release. Hadn't checked shopto and know that some people have issues with their history.

Still seems cheap to be including the camera though :)

Yeah it's a gamble trusting Shopto again with CC details.

And why get the game on day of release when you can get it 2 days before :p lol

I'm going to wait for EyePet to drop price before buying it. I know it's not going to keep me entertained for long, so I'm not paying full price for it. Hopefully there is another ?10 glitch on Game to use soon. Then I'll prob order it.

Yeah it's a gamble trusting Shopto again with CC details.

And why get the game on day of release when you can get it 2 days before :p lol

Nah I doubt it, it was a shambles what happened but I don't think a slip up of that momentum will happen again. If only they allowed paypal :/

At least ours was caught, pretty harsh what happened to Sethos LOL.

Nah I doubt it, it was a shambles what happened but I don't think a slip up of that momentum will happen again. If only they allowed paypal :/

At least ours was caught, pretty harsh what happened to Sethos LOL.

What actually happened to Sethos regarding shopto? I've been living under a rock for a while...

Someone booked plane tickets to like Egypt or something :rofl:

Oh dear, my CC got cancelled by my bank because it's details were found in a fraud watch! Shopto was the only internet site that I had my CC details on. Havne't ordered from them in a year I don't think.

Anyone know where I could get Batman at the cheapest price? Tempted to get it on the PS3 cause of the DLC stuff.

just to re-iterate a new GAME code that MightyJordan has posted on the xbox 360 offers page. ?5 off orders over ?50 codelastminute09b>

happy shoppin:):)

Oh yeah, thanks for posting that! I forgot to post it in the PS3 section. I might be spreading it a bit too much though, as I also posted it in the NFS Shift thread yesterday:p:p

The exploit still works too apparently.

Damn right it does!:p:p I used the exploit to get NFS Shift for ?35, Stoked for ?25, Tekken 6 for ?30, BLUR for ?35, and MGS Rising for ?35. All over the past 24 hour:p#33; :p

They are already aware of the glitch and people exploiting it. Spreading it now won't make a difference, so go nuts and tell anybody you like or post it in every topic :p

FYI, you don't need to use the glitch for StokEd, it's already less than ?25 on lots of e-tailer sites. But keep the Game preorder as you'll receive reward points. Just letting you know in case Game cancel it.

The shopto thing wasn't actually shopto:

My name is David Fennell I am the technical director here at ShopTo. It has been brought to my attention recently by a few customers that they believe we are the cause of fraudulent activity on their credit cards based on nothing more that the fact they have recently purchased from us (even if we were not the last place they have used the card). So we have decided to make a statement explaining the real causes of card fraud and what you can do about them.

From what we can tell there seems to have been several major credit card leaks in late 2008 and in the early part of 2009, these credit cards are now making their way into the market and it seems that nobody can guarantee their card is secure even if it has never been used online.

One of the most widely published leaks was the caching of 19000 credit cards by Google back in March 2009 which was claimed to have been from a gateway but later shown to have come directly from card issuers. For some reason our name got attached to some posts regarding this leak but we cannot fathom why that would be, it is simple enough for us to prove it's nothing to do with us as there are American Express cards in the list and we do not take American Express as a form of payment.

Since then a much larger leak has been reported from a "clearing house" called "Heartland Payment", the details of this seem to have been tightly controlled and no exact numbers have been released but I understand they are used by both Visa and Mastercard and *millions* of cards could have been compromised. On top of this the BBC did a report on how easy it is to purchase credit card details in India, details which have been taken by staff at the call centers out there, call centers which are used by uk phone companies:

BBC NEWS | UK | Overseas credit card scam exposed

Switched ... ght-lipp/4

http://www.thetechherald.com/article.ph ... -breached-

ShopTo.net Customers Beware - weebls-stuff forums

The last link is an example of someone falsely blaming us then actually finding out the real source of the problem - unfortunately this is all too rare and most customers never really know how their card details were leaked. When looking over a credit card statement for "likely suspects" is seems many people will blame us because we are a smaller company however this is a very bad assumption, it is actually the larger companies who have massive call centers where it is easy for someone to remain anonymous and quietly sit in a corner taking down card numbers.

On top of this there are a number of a number of computer viruses (trojans) which are particularly prevalent at the moment that can steal your credit card information from your computer when you enter them into a website. We would suggest all Internet users make sure your virus scanner is up to date and always use a modern browser when shopping online.

From all this it appears if you have not been issued a new credit card in the last few months, you could be at risk of unauthorised transactions even if you have never used the card either online or in person. Regrettably, the only course of action available to credit card holders is to ask your card issuer for a new card, it may be inconvenient but it will not cost you anything and may stop problems in the future.

At ShopTo our focus is very much on the customer and that of protecting them in every way possible, without you we would not exist. If you have read the security sections on our site you will know that we do not store credit card details - they are all stored at our payment gateway "ProTx" (currently changing it's name to "SagePay") and a "repeat transaction" system is used when a purchase is made. Even in the event that someone did manage to illegally gain access our system there are no credit card details for them to take - this is a statement that very few online retailers can make.

We have recently puchased and implemented the highest level SSL secure certificate available - an "Extended Verification Pro" Certificate from VeriSign. This certificate not only offers 256bit transactional security to modern browsers but also forces old browsers to use 128bit transfer when with other certificates they may use 60 or even only 40 bit encryption.

ShopTo acknowledges the frustration and hurt that can be caused when a customers card details are stolen and misused, but at the same time, we do not feel that any of our own systems, software or method of processing orders has led to or assisted in the theft or misuse of any data. Rest assured that ShopTo will always strive to be at the cutting edge of systems that safeguard customers transactional and personal data, whether that be the first or multiple repeat transactions. If anyone reading this has or knows of any evidence that can confirm a problem with our security we would urge them to contact our customer support immediately and pass this information on so we can take steps to rectify it.

We thank all our loyal customers who have been trying to defend us in the forums and thank you all for your continued custom that has made ShopTo the largest independant retailer of computer games in the UK.

Regards,

Dave Fennell

Technical Director

ShopTo.Net

And they do now also accept PayPal :)

That's what I read that made me wonder. I haven't ordered from ShopTo in a while, but that does seem like it's as secure as it's ever gonna get. But still, PayPal is a nice addition - didn't notice that they accepted that now.

Just needs a few more ? off and I'm almost ordering:pp

lol Well with the camera itself retailing at ?24.99 on there, you might be hard pushed, but never say never....Edit - Also Official BT Headset now back in stock at play.com ?17.:) :) /i>

This topic is now closed to further replies.
  • Posts

    • Yup, that's a doozy right there 😄
    • It's a bundle of tools created by a variety of people, so things can go wrong sometimes. It's a great addition to Windows, and I use a lot of the tools on a daily basis. Also, it's still a 0.**** release so quick updates are to be expected 😉
    • Oh, I did. And it's even worse than I was hoping! Besides a lot of techno-babble jargon (yes I understand 100% of it but it's still all just techno-babble) there's 2 key points that make me super-weary about even considering testing this out. -- By default, after installation, a relay is automatically set up, so you do not need to care about that. * Non-chatmail apps use email servers as a long-term message archive while chatmail clients use email servers for ephemeral instant message relay. * Supporting the full variety of classic email setups would require considerable development and maintenance efforts, and complicate making chatmail-based messaging more resilient, reliable and fast. -- Basically, the end-user device is the 'server' (relay) so there is NO ARCHIVING whatsoever because every message is necessarily ephemeral. Great for techno-paranoia (and for illicit activities preferring no tracks to cover) but terrible for everybody else. It's also ironically contradictory to engineering principles of redundancies besides the transport layers due to the explicit absence of any persistent storage. Instead of 'classic email address' retaining multi-GB messaging archives on its server, now every device must retain 100% of those storage demands. (Email messages were originally meant to be short correspondences, not the multi-MB attachments boondoggle that now exists with unlimited spam engines flooding every potential recipient.) Any device swap or reset (or loss) makes the entire message history go bye-bye forever... lest there's an off-device auto-archival "relay" mechanism that's really a separate server that holds onto all transported messages (an email server) that utilizes 'chatmail email address' identities (like an email server) and its own persistent storage archive (like an email server). But... this solution is hoping to exist alongside real-world email address identities (based on the email server relay pathway) but simply render messages in chat thread format in an ephemeral manner (with contents being encrypted, and messages auto-expiring) ... In the end, it's a chat app/experience for the Web3/P2P-at-all-costs zealots. (I have accts on all sorts of federated web3 services so I understand the technical and non-technical alike.) For any practical users, however, it's just another service to download/install, register, cross-share id cards/qr codes, but know that there's no history/archive whatsoever (by design) so no account/message recovery whatsoever... update the device, install a bummed update patch, or dare upgrade your device... all history, poof, gone. Ya gotta start everything over again like they're a brand new person.
    • You've tried DuckDuckGo and Brave Search, now get serious with SearXNG by Paul Hill Over the last decade, it has become quite trendy to dump Google Search in favor of privacy-preserving alternatives such as DuckDuckGo, Startpage, and Brave Search. These search engines have done a very good job at highlighting dodgy practices by Google, such as adjusting search results based on what it thinks you’ll like (filter bubble) and stalking you around the web to advertise to you. While these search engines are good starting points when compared to non-private services like Google, there are still quite a few issues with them. For example, both DuckDuckGo and Brave Search require running non-free JavaScript in your web browser, which is comparable to running proprietary software on your computer, meaning you can be sure about what it’s actually doing in the background. Another issue is that these search engines are hosted on the respective companies’ servers, and you are using a service that you don’t control. Finally, DuckDuckGo, while offering privacy features, relies heavily on Microsoft’s infrastructure for its results and, in the past, has permitted Microsoft tracking scripts. If you are looking for a more private search solution than DuckDuckGo, Brave Search, and Startpage, then I recommend taking a look at SearXNG. It is a privacy-respecting metasearch engine that can be used via different public instances, which is useful for mobile users, or you can install it on your computer or server and run it locally with maximum control. Unlike Google, Bing, or Brave Search, which crawl the web and have their own search indexes, SearXNG is a metasearch engine, meaning it taps other search engines, stripping your identifying data, such as IP address, user agent, and cookies, in the process. Your search query is sent to the other search engines you enable before aggregating the results. SearXNG has deployment flexibility. If you are a casual user or a mobile user and don’t want to run SearXNG locally, you can use a public instance that is hosted by someone else. The main problem with this is that you are putting trust in the maintainer of the instance regarding stuff like logs that they may keep; good hosts should have a privacy policy explaining their policies. If you are trying to use SearXNG, you can also install the software on your device and then head to 127.0.0.1:8080 in your browser and search from there. While you don’t have to worry about a third-party admin like the public instances, search engines could ultimately block your IP address if they frown on you pulling in their search results locally. If you want to run it locally, it’s a good idea to use proxies or VPNs to hide your actual IP. You don’t have to worry about this with a public instance, as search engines never see your IP address. The main privacy benefit of using SearXNG is that it isolates your identity from the underlying engines that it’s capable of searching, such as Google and Bing. These search engines will only see requests coming from a generic server, so they can’t profile you and create a bubble filter that influences what results you see. This also ensures that your search engine doesn’t turn into an echo chamber that prevents you from reading alternative points of view. As a free software project, you are allowed to inspect SearXNG to make sure there are no negative features bundled inside. This sets it apart from the privacy search engines mentioned earlier because you can’t check their source code. As a meta search engine, you are not restricted to getting results from one source. Due to the fact that it scrapes content from other websites, your SearXNG instance will periodically get blocked from different providers, so it’s good to select a range of sources as a backup. While enabling all of the services will give you great results, this can make searching slower. I am personally happy with slower searches for the best results, but you can always check which providers are slowing down your search from the search results page and disable them to speed things up. If you want decent results quickly, enable the main search providers such as Google, Brave, DuckDuckGo, Qwant, Bing, and Yahoo. This way, you get wide coverage without the latency. On the Engines tab in Preferences, do note that there are different tabs, such as General, Images, and Videos, with their own providers that can be toggled and are not covered by "Enable all" while on the General tab, so be sure to dig into each. Just a note, if you want to enable everything, press "Enable all" in one tab, then hit save at the bottom of the page, then do the next tab, and so on. If you press "Enable all", then do that in each tab, and then save, nothing will stick. When I had just some of the search engines enabled, I searched “define nefarious” and results came back with the definition of “define” - obviously that was a sucky result. However, when I had everything enabled, it found dictionary pages for the word “nefarious” and even had an inline definition on the sidebar, which is quite nice too - that was delivered by WolframAlpha for anyone wondering! Probably the worst thing about this meta search engine is that the engines you select are saved with a cookie, so you must enable them on every new device you use SearXNG on, including if you decide to go into incognito mode with your web browser. Honestly, I would say this is the most annoying aspect, and perhaps if your browser lets you choose a separate private browsing search engine, then it would be best to use DuckDuckGo for this portion of your browsing. Another weakness of SearXNG is the random blocking of it by search providers. When you are on the results page, expand the “Response time” box, and it will show things like “Suspended: too many requests” or “access denied”. This is why it is good to enable several providers so that there is always a fallback to get results from. I won’t pretend SearXNG will be for everyone, however, if you enable all of the providers and put up with the slower response time, the results can be really amazing. Even if you don’t want to use it as your daily driver, keeping a bookmark handy that links to it is a good idea if you ever feel like doing a deep dive into a niche topic where other search engines are just failing to bring up any good result, due to the amount of sources it looks on. If you’re interested in radical user control over the software you use, installing SearXNG locally can also be a good idea, but be prepared to be temporarily blocked from sites if you trigger bot sensors without a VPN. Personally, I’ve opted to use a public instance, rather than install it myself. If you want to use it via a public instance, head over to searx.space to find a provider. Let us know in the comments if you have used SearXNG or its predecessor, Searx. What do you think about the quality of the results?
    • Dear Neowin, If it is not too much trouble, can you start using the new-ish designations for Insider Preview? "Experimental" is different than "former Dev" as it can apply to different models, eg 26H1 or 26H2 etc, right? No need to seed confusion IMHO. And, please "finally" update your graphics. OK?
  • Recent Achievements

    • Week One Done
      flexorcist earned a badge
      Week One Done
    • One Month Later
      Woland13 earned a badge
      One Month Later
    • Week One Done
      Woland13 earned a badge
      Week One Done
    • One Year In
      bernmeister earned a badge
      One Year In
    • Week One Done
      Scoobystu earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      503
    2. 2
      +Edouard
      226
    3. 3
      PsYcHoKiLLa
      158
    4. 4
      Steven P.
      75
    5. 5
      FloatingFatMan
      71
  • Tell a friend

    Love Neowin? Tell a friend!