Hacker News Reader

Comment by analyst74 | Hacker News Reader

I'm sorry for what you have to deal with, and I think as an industry we have definitely not thought through on the 2FA-over-phone system.

But I feel like asking for a notorized letter confirming you are actually "you" is quite reasonable. Otherwise it'll be all too easy for malicious social engineering.

View on HN

What's the consequence of him being impersonated here though? Some fraudster pays his bill and gets nothing out of it?

Some fraudster shutting down an account that should actually be kept running, owned by someone who is merely very lax about paying bills.

If you aren't paying your bills, then you shouldn't be surprised that it gets shut down.

Who downvoted you for saying one shouldn't be surprised when an account gets shut down after not paying for 3 years?

On that note: why hasn't the account been shut down for nonpayment?

Maybe the debt needs to be groomed on paper before it's sold.

Presumably because that only happens when it crosses a threshold dollar amount, and $0.80/month isn't enough to get it over that threshold.

(That price is too small for there to be a running instance; it's most likely for storage belonging to an instance that was shut down, such as a 16GB EBS snapshot. It is reasonable that Amazon would be very careful about deleting that.)

Please don't complain about downvotes

The idea being that it wasn't Amazon that shut it down, but the fraudster.

I guess I fail to see the importance of difference. Legal reasons?

Amazon is responsible for making a reasonable effort to prevent anyone unauthorized from doing anything to an account. Swap "shut down" with "read personal information tied to account" or "upload a heinous webpage to the AWS server," whatever.

This is not one of those "by any means, achieve the ends" type scenarios.

That's not particularly relevant to the question of whether a fraudster should be able to shut down your account simply by offering to pay the current bill.

> let me pay the bill and shut the account down

The account gets shut down

Wouldn't the consequence be that a fraudster gets complete access to the account and starts doing nefarious stuff?

Someone gains unauthorized access to their data stored in AWS.

The Amazon support employee gets fired during some internal audit for policy noncompliance?

Reply on news.ycombinator.com