3 ms·

Thank you for your work! Yeah I haven't run into the 2FA issue yet, but probably will. Is there any docs about this 2FA issue I can read (other than the short

• Abishek_Muthian 4y ago
  Amazon enabled 2FA after an attack vector with vulnerabilities was demonstrated using email delivery[1] on Kindle. The researcher says that Amazon now(Jan 2021) sends verification link if they cannot authenticate the email id. But my hntokindle.com email id had SPF & DKIM from the start and the verification links started occurring only late last year (or) early this year. That's what lead me to believe that the 2FA is enabled after the number of emails from an email id crosses a threshold. I don't expect Amazon to clarify this in their docs. They might have whitelisted domains from known services like Instapaper (I think they generate unique sender email ids) along with the id they use for 'Send To Kindle' if they used email for that in the first place. Although it might be possible to reverse engineer 'Send To Kindle' browser extension to send your HN item, But it might also raise legal issues(INAL). [1] https://medium.com/realmodelabs/kindledrip-from-your-kindles-email-address-to-using-your-credit-card-bb93dbfb2a08 https://medium.com/realmodelabs/kindledrip-from-your-kindles...