Live data from Hacker News

Still locked out of my AWS account

docs.google.com

201–210 of 283 posts

Re: Still locked out of my AWS account

#201

Earlier quoted context omitted.

Some fraudster shutting down an account that should actually be kept running, owned by someone who is merely very lax about paying bills.

If you aren't paying your bills, then you shouldn't be surprised that it gets shut down.

Who downvoted you for saying one shouldn't be surprised when an account gets shut down after not paying for 3 years?

On that note: why hasn't the account been shut down for nonpayment?

Re: Still locked out of my AWS account

#202

Earlier quoted context omitted.

I used this trick for years. However, there are downsides. For example, sometimes a service will let you sign up with this just fine, but later when you need to do something else (such as password reset) or a phone agent has to enter it... it chokes. Not to mention after some time passes you may forget what the special bit was and have to fall back to searching your email. Being regimented about the naming system hel…

> Not to mention after some time passes you may forget what the special bit was and have to fall back to searching your email A password manager solves this problem

I knew someone would say this. lol If you're away from your computer and haven't installed the password manager to your phone (I'm not nearly alone in this), then you may need to fall back to searching your emails. Better?

Anyway, this doesn't solve the other technical problems you may hit at some point using this trick.

I'm just giving people a heads up. It's a useful tool for certain things, but it can be overused.

Re: Still locked out of my AWS account

#203

I've been locked out of my AWS account for almost 3 years now. I have 2FA enabled, tied to a phone number I no longer have access to. I receive two emails per month. One invoice, for $0.80 (I cannot remember what is running on there, but I guess it must be something). One threatening, "Your AWS Account is about to be suspended". I've been "about to be suspended" for the entire 3 years. I want to pay the bill, I can't…

I was locked out of my AWS account for about 2 years due to loosing my 2FA authenticator on my phone. But had no open bills and didn't really care about it, so I did not try to gain back access.

Until last week, when I decided that I need to use the account again. I simply clicked the recovery link on their 2FA login form. Had to enter my account details and my phone number. Within 15 minutes (as stated on the website) a member of their service team called me. I explained the situation (lost 2FA app). Not a problem, the service agent told me. He then sent me an e-mail (to my AWS-associated mail address) with some random characters, which I had to read back to him. After that he simply removed 2FA, and I was able to log in with my username/password. For me the experience was quite pleasant, but had someone else have access to my e-mail account and knew my AWS username/password, he might have been able to take over my account, bypassing 2FA. I don't quite know how to feel about that.

EDIT: Ok, this probably only works if your phone number is also already associated with your account. So an attacker additionally would need access to my phone number, making things quite a bit more secure in my view.

Re: Still locked out of my AWS account

#204

Earlier quoted context omitted.

Some fraudster shutting down an account that should actually be kept running, owned by someone who is merely very lax about paying bills.

If you aren't paying your bills, then you shouldn't be surprised that it gets shut down.

The idea being that it wasn't Amazon that shut it down, but the fraudster.

Re: Still locked out of my AWS account

#205

I've been locked out of my AWS account for almost 3 years now. I have 2FA enabled, tied to a phone number I no longer have access to. I receive two emails per month. One invoice, for $0.80 (I cannot remember what is running on there, but I guess it must be something). One threatening, "Your AWS Account is about to be suspended". I've been "about to be suspended" for the entire 3 years. I want to pay the bill, I can't…

Cancel your card. Problem solved.

Re: Still locked out of my AWS account

#206

Earlier quoted context omitted.

That's solved by disputing the debt. Document the good faith attempts to pay.

I take it you haven't actually tried disputing debt. It's not a simple process, and can wreak havoc on your credit even if you are clearly not at fault.

I have disputed debt. Simple is relative, but I certainly did not have any trouble with the process.

It's true that your credit can be damaged by false reports. It's also true that damages resulting from false reports are recoverable.

If you don't feel like you can do it yourself, hire a lawyer and have them sue Amazon to recover their fee.

Re: Still locked out of my AWS account

#207

Also having problem with AWS - can't access it and they keep billing me for something there I want to shut it down (EC2?) but I can't. I recently moved from Brazil to UK (new address) and changed phone + sim card (Authenticator after restore from backup lost all 2 factor auth entries). This is the moment when you realise that you're outside of predefined use cases of The Machine and you're fucked. Nobody is here to h…

I like to think "thank god I have a google voice number" but then I realize if google just decides to shaft google voice, as the have to countless of their projects in the past, I am totally fucked in regards to the many things that 2fa off it.

Re: Still locked out of my AWS account

#208
post #134

Also having problem with AWS - can't access it and they keep billing me for something there I want to shut it down (EC2?) but I can't. I recently moved from Brazil to UK (new address) and changed phone + sim card (Authenticator after restore from backup lost all 2 factor auth entries). This is the moment when you realise that you're outside of predefined use cases of The Machine and you're fucked. Nobody is here to h…

This anecdote makes me very happy with AWS. I want loss of 2FA to completely revoke access to my account. Otherwise any smart hacker can social engineer Amazon support with some fake drivers license photo and steal all my BTC (for example).

So what is your plan in case your phone gets lost/stolen/whatever and you lose access to your TOTP app?

Re: Still locked out of my AWS account

#209

Also having problem with AWS - can't access it and they keep billing me for something there I want to shut it down (EC2?) but I can't. I recently moved from Brazil to UK (new address) and changed phone + sim card (Authenticator after restore from backup lost all 2 factor auth entries). This is the moment when you realise that you're outside of predefined use cases of The Machine and you're fucked. Nobody is here to h…

I had this situation. I had an AWS account linked to some email I no longer had access to and could not get into the account. I opened a support ticket and they sent an email to the old address, after 10 days of no response they sent it to "Legal" for review. The account was then closed by them which resolved it for me.

Re: Still locked out of my AWS account

#210

I've been locked out of my AWS account for almost 3 years now. I have 2FA enabled, tied to a phone number I no longer have access to. I receive two emails per month. One invoice, for $0.80 (I cannot remember what is running on there, but I guess it must be something). One threatening, "Your AWS Account is about to be suspended". I've been "about to be suspended" for the entire 3 years. I want to pay the bill, I can't…

Cancel your card. Problem solved.

To clarify, get a new number for your credit card account; don't cancel it entirely. If it's your oldest credit card account then canceling it outright will have bad repercussions for your credit score.
Post reply on HN