Hacker News Reader

Looks nice, but it just feels a bit weird to enter your amazon password with linked credit cards and bank accounts on another site. I'm aware that there's probably no better way of accessing that purchase history data but it's just something people are preaching for years shouldn't be done.

View on HN

Agreed. However, even with your credentials, we wouldn't be able to access your credit card number (Amazon hides it). Additionally, if we would want to order anything in your name, but our address, we would have to reconfirm the credit card number, which we don't have.

This should be right there at the sign in screen. This is info people don't know, but will give them a lot safer feeling using your site.

You could, however, spin up or down EC2 instances associated with that account. You could easily destroy a business with this information, or bankrupt a person (well, Amazon is usually pretty good about forgiving accidental charges, but imagine explaining to them how someone got your credentials).

Reply on news.ycombinator.com