Still locked out of my AWS account

Post by TrickyRick » Fri, Jul 07, 2017, 4:11 PM UTC

falcolas wrote: post #105

Twirrim wrote: post #77

Earlier quoted context omitted.

In all seriousness, email jeff@amazon.com. The most likely outcome is that some relevant managers will receive one of the infamous "?" emails from him. If so, that'll result in two things: 1) Your problem will be resolved ASAP, managers right up the chain will be tracking it extremely closely, as they'll have to justify every action to Jeff. Everyone goes scrambling when one of those emails goes out. 2) A post-mortem…

I think that's gone the way of the dodo. Last I remember, he didn't read those anymore, and they were automatically just shunted into the normal escalation flow. Too many people got wind of it and abused it.

Post by FireBeyond » Fri, Jul 07, 2017, 4:13 PM UTC

sillysaurus3 wrote: post #13

iddqd wrote: post #9

Might sound obvious in hindsight, but _always_ create separate AWS accounts for your different projects.

Doesn't this require separate gmail addresses? If so, then that's an extremely bad idea. I already had one gmail account completely banned with no notice. I wasn't doing anything abusive -- I used it for some npm projects and a github account. Actually, is there a reasonable free gmail alternative for situations like this? I'd like to migrate. FastMail is worth paying for, but it's too expensive for one-off side proj…

Post by aquadrop » Fri, Jul 07, 2017, 4:15 PM UTC

sillysaurus3 wrote: post #94

aquadrop wrote: post #88

Earlier quoted context omitted.

> My point was, if you use a single account, it's far less likely to get banned Why do you think that? If anything, you have more activity you can be banned for... And also, why you say it like gmail is the only email provider? You need separate _email_ accounts, not gmail. It can be some other service or your own domain. Google can be service provider behind your own domain, but you will control address space etc. N…

It seems like Google uses some heuristics when deciding whether to ban an account. My theory is that if you stick with your personal gmail account, you have such a long history of activity that it's unlikely to be flagged by whatever "smart" algorithm they're using. I was quite surprised that my gmail account was banned without doing anything remotely malicious. (Certainly not anything listed in https://www.google.co…

Post by dlgeek » Fri, Jul 07, 2017, 4:16 PM UTC

willow9886 wrote: post #93

Jwarder wrote: post #73

Earlier quoted context omitted.

I don't follow your logic about the breach risk. If you're using unique passwords per service (and you really should) then I would expect any breach that involved passwords would have less of an effect. If there is a breach with a centralized single sign on service then every other dependent service is also affected.

There's a big difference between what people should do, and what people actually do. Research consistently shows that a large percentage of people reuse passwords across many sites. [1] http://www.jbonneau.com/doc/DBCBW14-NDSS-tangled_web.pdf

Post by [deleted] » Fri, Jul 07, 2017, 4:16 PM UTC

ianhawes wrote: post #119

markaius wrote: post #104

[Deleted]

Please delete your comment. I am incredibly happy that Digital Ocean made you go to those lengths to get your account back. The last thing we need is web services companies requiring less security. Social engineering attacks are typically the method of entry to hosting providers such as Digital Ocean. Frankly I would be totally fine if they required another form of ID (such as a passport) or another form of address/n…