Still locked out of my AWS account

Post by leesalminen » Fri, Jul 07, 2017, 4:46 PM UTC

mobiledev1 wrote: post #150

stickydink wrote: post #141

I've been locked out of my AWS account for almost 3 years now. I have 2FA enabled, tied to a phone number I no longer have access to. I receive two emails per month. One invoice, for $0.80 (I cannot remember what is running on there, but I guess it must be something). One threatening, "Your AWS Account is about to be suspended". I've been "about to be suspended" for the entire 3 years. I want to pay the bill, I can't…

your bank can usually notarize the document for free.

Post by softawre » Fri, Jul 07, 2017, 4:53 PM UTC

bitJericho wrote: post #147

yellow_postit wrote: post #146

Earlier quoted context omitted.

at what point does the debt get sold to a debt collector thus causing you more trouble and pain than paying for a notary would cost? Also if you're in the US and maintain a bank account, many banks offer free notary services.

I love your willingness to be blackmailed.

Post by GordonS » Fri, Jul 07, 2017, 4:53 PM UTC

midispring wrote: post #86

drbawb wrote: post #56

Earlier quoted context omitted.

One trick I like is that you can use `account+ @example.com` and a lot of services will consider it a separate e-mail address, even though MTAs will transfer it to the same account; this has the added benefit of being easy to filter for on your e-mail client. I also use this tactic when signing up for web services that I anticipate will spam me. (I import a lot of merch from China/Japan; their unsubscribe systems ten…

I used this trick for years. However, there are downsides. For example, sometimes a service will let you sign up with this just fine, but later when you need to do something else (such as password reset) or a phone agent has to enter it... it chokes. Not to mention after some time passes you may forget what the special bit was and have to fall back to searching your email. Being regimented about the naming system hel…

Post by yebyen » Fri, Jul 07, 2017, 5:00 PM UTC

bpodgursky wrote: post #136

nyi wrote: post #126

Earlier quoted context omitted.

Whats your proposed resolution for the two cases on this thread?

Unless you have written backup codes, there should not be a resolution possible. You either remember to changes phone #s before you change them, or you are locked out. Deal with the phone company.

Post by Macha » Fri, Jul 07, 2017, 5:02 PM UTC

analyst74 wrote: post #158

stickydink wrote: post #141

I've been locked out of my AWS account for almost 3 years now. I have 2FA enabled, tied to a phone number I no longer have access to. I receive two emails per month. One invoice, for $0.80 (I cannot remember what is running on there, but I guess it must be something). One threatening, "Your AWS Account is about to be suspended". I've been "about to be suspended" for the entire 3 years. I want to pay the bill, I can't…

I'm sorry for what you have to deal with, and I think as an industry we have definitely not thought through on the 2FA-over-phone system. But I feel like asking for a notorized letter confirming you are actually "you" is quite reasonable. Otherwise it'll be all too easy for malicious social engineering.