Re: [Lynx-dev] lynx and amazon?

[Ian Collier]

On Mon, Aug 26, 2019 at 03:37:20PM -0400, Karen Lewellen wrote:
> So I am wanting to discover if this error might be unique to  the lynx setup
> at shellworld, or if this is something Amazon is doing where Lynx is
> concerned in general.

It's not unique to you.  I cannot see any way of getting past this screen
in Lynx without being able to view the image.  The audio challenge simply
doesn't work at all.  Incidentally, it doesn't seem to matter whether or
not you enter your password correctly on the first login screen.

But even if I do view the CAPTCHA and enter the correct characters,
Amazon sends Lynx to the "please enable cookies" page.  Now when I
look at the cookie jar, all I have is 'i18n-prefs=GBP' whereas there
are supposed to be at least 'session-id' and 'session-id-time' cookies
set; and indeed they were set before I entered the CAPTCHA.  There is
also supposed to be 'ubid-acbuk', but this one was never present in
Lynx's cookie jar.  I think the lack of this cookie is what is prompting
Amazon to say "please enable cookies".

So I think there is another issue going on.  Amazon is issuing some
cookies valid for approx 20 years and these are not getting stored
in my copy of Lynx.  I think we may be suffering from a year-2038
bug here.  (This may vary with how Lynx is compiled.  My copy is
the one provided by the Fedora 30 packagers on x86_64 platform.)

Looking back in my Lynx.trace for Set-Cookie headers, I have something
like this (in reverse order):

Set-Cookie: session-id-time=2197638836l; Domain=.amazon.co.uk; Expires=Mon, 
22-Aug-2039 15:13:56 GMT; Path=/
Set-Cookie: session-id=xxx-xxxxxxx-xxxxxxx; Domain=.amazon.co.uk; Expires=Mon, 
22-Aug-2039 15:13:56 GMT; Path=/
Set-Cookie: ubid-acbuk=xxx-xxxxxxx-xxxxxxx; Domain=.amazon.co.uk; Expires=Mon, 
22-Aug-2039 15:13:28 GMT; Path=/
Set-Cookie: i18n-prefs=GBP; Domain=.amazon.co.uk; Expires=Tue, 01-Jan-2036 
08:00:01 GMT; Path=/
Set-Cookie: session-id-time=2082787201l; Domain=.amazon.co.uk; Expires=Tue, 
01-Jan-2036 08:00:01 GMT; Path=/
Set-Cookie: session-id=xxx-xxxxxxx-xxxxxxx; Domain=.amazon.co.uk; Expires=Tue, 
01-Jan-2036 08:00:01 GMT; Path=/

The ones dated 2039 never appeared in Lynx whereas the ones dated 2036 did;
and moreover, the later 2039 ones caused the earlier 2036 ones to be deleted.

imc