News for hackers. Stuff that matters.
Re:AWS doesn’t know who I am by Galanwe on Sunday August 22, 2021 @08:11AM (#28264824)
> What I do despise is that my Amazon.com credentials are the same as my Amazon AWS root account credentials.

This bite me hard last year... I lost my phone and with it my MFA for the root account, and of course forgot to properly backup the MFA seed.

Now when calling AWS support to get back my accesses, they ask me to prove ownership of my Amazon.com account with the same email... Which is like 15 years old. I changed phone number, address, country dozens of times since then.

Apparently I would have to get back to my home country and ask a notary to sign a paper asserting I am really me to get back my accesses. Nightmare.

Re:AWS doesn’t know who I am by danielheath on Sunday August 22, 2021 @06:17PM (#28270216)
As you have learned, setting up 2fa for an important service isn’t something to be done lightly.

My current setup is two yubikeys (one in storage, one in my computer) and OTP on my phone. Failure is still possible but it’s unlikely enough for me.

Re:AWS doesn’t know who I am by smt88 on Monday August 23, 2021 @04:43AM (#28273559)
I'd love to do this, but many services still only support SMS or don't support multiple hardware keys.