3 ms·

Hi Daniel, Congratulations on the launch! I received an email from HN user telling me about this post because a while back I was running 'HN to Kindle' servic

Hi Daniel, Congratulations on the launch! I received an email from HN user telling me about this post because a while back I was running 'HN to Kindle' service[0] and since Amazon enabled 2FA for bulk emails even for approved email ids I lost motivation to run it further and instead made the core application open-source[1]. Since you're sending HN item individually, I'm not sure whether you'll face the 2FA block but do monitor whether your users are getting your emails delivered by connecting with them. Your website's presentation is way better than mine, Perhaps because you've put JS to good use. Feel free to use my code to implement other features like classification according to chosen topics if you'd like it. [0] https://web.archive.org/web/20220216140431/https://hntokindle.com/ https://web.archive.org/web/20220216140431/https://hntokindl... [1] https://github.com/abishekmuthian/hntoebook https://github.com/abishekmuthian/hntoebook

longnguyen 4y ago
Thank you for your work! Yeah I haven't run into the 2FA issue yet, but probably will. Is there any docs about this 2FA issue I can read (other than the short doc on amazon.com)? Thanks,
- Abishek_Muthian 4y ago
  Amazon enabled 2FA after an attack vector with vulnerabilities was demonstrated using email delivery[1] on Kindle. The researcher says that Amazon now(Jan 2021) sends verification link if they cannot authenticate the email id. But my hntokindle.com email id had SPF & DKIM from the start and the verification links started occurring only late last year (or) early this year. That's what lead me to believe that the 2FA is enabled after the number of emails from an email id crosses a threshold. I don't expect Amazon to clarify this in their docs. They might have whitelisted domains from known services like Instapaper (I think they generate unique sender email ids) along with the id they use for 'Send To Kindle' if they used email for that in the first place. Although it might be possible to reverse engineer 'Send To Kindle' browser extension to send your HN item, But it might also raise legal issues(INAL). [1] https://medium.com/realmodelabs/kindledrip-from-your-kindles-email-address-to-using-your-credit-card-bb93dbfb2a08 https://medium.com/realmodelabs/kindledrip-from-your-kindles...

longnguyen 4y ago

Thank you for your work! Yeah I haven't run into the 2FA issue yet, but probably will. Is there any docs about this 2FA issue I can read (other than the short doc on amazon.com)? Thanks,

Abishek_Muthian 4y ago
Amazon enabled 2FA after an attack vector with vulnerabilities was demonstrated using email delivery[1] on Kindle. The researcher says that Amazon now(Jan 2021) sends verification link if they cannot authenticate the email id. But my hntokindle.com email id had SPF & DKIM from the start and the verification links started occurring only late last year (or) early this year. That's what lead me to believe that the 2FA is enabled after the number of emails from an email id crosses a threshold. I don't expect Amazon to clarify this in their docs. They might have whitelisted domains from known services like Instapaper (I think they generate unique sender email ids) along with the id they use for 'Send To Kindle' if they used email for that in the first place. Although it might be possible to reverse engineer 'Send To Kindle' browser extension to send your HN item, But it might also raise legal issues(INAL). [1] https://medium.com/realmodelabs/kindledrip-from-your-kindles-email-address-to-using-your-credit-card-bb93dbfb2a08 https://medium.com/realmodelabs/kindledrip-from-your-kindles...