If you have an Apple account and an Amazon account, read this

[delphipsmith]

A hacker has discovered -- and, happily, disclosed -- a "blind spot" between Apple and Amazon's identity and account verification procedures:

Details are here and here.

I have to say this had never occurred to me as a way to game the system, but it's scary easy because so much information is available online (names, addresses, phone numbers, email addresses) and I'll bet can be done with other paired accounts as well. I know how many places use the last 4 digits of your credit card as verification.

Amazon claims this has since been fixed, but I have my doubts. My wallet was stolen last year and within four hours I had closed all my credit and debit cards, but the thief got my debit card turned back on via the simple route of calling my bank, pretending to be me, and telling them the card had only been lost and was now found. Wow.

It's almost enough to make you leave ze interwebz entirely. Almost, because otherwise where would I go for beta readers??

Comments

[delphipsmith]

HAHAHAHAHAAHAAAA!!!!! No, they did not. I did file a police report, which means I wasn't liable for the $700 in charges, but no, the cops never caught them. A**holes (the thieves, not the cops).