Hacker News Reader

Thanks for the tip on that attack vector- guess I should be shredding those invoices then.

It gets worse: attackers don't even need the paper invoices - at least in 2012, they were social engineering them directly out of Amazon CSRs [0].