Monday, January 25, 2016

Amazon’s Customer Service Backdoor

Eric Springer (Hacker News, Slashdot):

The attacker gave Amazon my fake details from a whois query, and got my real address and phone number in exchange. Now they had enough to bounce around a few services, even convincing my bank to issue them a new copy of my Credit Card.

[…]

I again contact Amazon to reiterate how important it is that they keep my account secure, and not give out my details to anyone with a name and address. They promise they’re putting a note on my account, and it’ll never happen again. And I will be contacted by a specialist (never happened, again)

Comments RSS · Twitter

Leave a Comment