4 ms·
That is a little unnerving if true.
by ruffrey 11y ago
That is a little unnerving if true.
- infinite8s 11y agoA reporter at Wired had his digital life destroyed (including personal mac wiped) by social engineering, using little more than info from one account (last 4 digits of credit card from Appstore account) to socially engineer Amazon customer support - http://www.wired.com/2012/08/apple-amazon-mat-honan-hacking/ http://www.wired.com/2012/08/apple-amazon-mat-honan-hacking/ Edit. Had some details wrong. It was a reporter at Gizmodo, and basically a collection of data was gathered from various online services (mailing address, last 4 digits of CC) to ultimately social engineer his Apple account and remote wipe his computer. A number of factors were involved, but ultimately he was done in by not having 2FA on google, and not backing up his machine.
- pilom 11y agoJust confirmed with our CTO. He was able to turn MFA off on our root AWS account over the phone.
- mr_luc 11y agoHuh. I'm going to say thanks to HN, and this comment chain, for bringing this to light. That seems kind of insane.
- deleted 11y ago[deleted]
- brazzledazzle 11y agoMaybe it's time for Amazon to decouple AWS accounts from Amazon shopping accounts.
- arviewer 11y agoI think you can do that yourself, although it probably means that you need two credit cards.
- brazzledazzle 11y agoI mean from a system level perspective. The trouble is that they have policies that are optimized for people shopping on a site with a money back guarantee not for hosting critical infrastructure.