News for hackers. Stuff that matters.

A comment on Show HN: Get a list of your Amazon purchases and see what you can sell them for. Parent comment

Re:Show HN: Get a list of your Amazon purchases and see what... by sliverstorm on Tuesday July 22, 2014 @01:27PM (#8070282)
Also highly risky is AWS. Maybe an attacker can't order diamond rings for themselves, but they certainly could spin up a million EC2 instances to mine bitcoin.

The cost efficiency is terrible of course, but what do they care.

[ Parent | on HN ]
Re:Show HN: Get a list of your Amazon purchases and see what... by ChristianKletzl on Tuesday July 22, 2014 @01:45PM (#8070428)
We haven't tested that, but I highly recommend (regardless of using ShelfFlip) to use "Multi-Factor Authentication" for AWS.
[ Parent | on HN ]
Re:Show HN: Get a list of your Amazon purchases and see what... by Corrado on Wednesday July 23, 2014 @10:34AM (#8074560)
While MFA is a great idea and I highly recommend it, it doesn't do anything to prevent API access. :(
[ Parent | on HN ]