Encrypt all the things!

You are reading a single comment by @Velocio and its replies. Click here to read the full conversation.

•

Velocio

This is going around https://sackheads.social/@Cloudguy/110256209708866473

For those who trust me:

Goto your Amazon account, sign out of all your devices, everything, everywhere all your Echos (yes I know it's a pain), reset your password, delete 2FA and any tokens and reset them. Now.

That doesn't include Fido / Yubikeys but does include Auth tokens.

Do it now.

As much a pain as it is to reset Echo and all smart devices, trust me, please do it.

I can't tell you more yet, but I am being ethical and you need to actually realise I have a clue.

It's been a scary day

I'm not fully buying it, because Amazon accounts and AWS accounts are intrinsically linked and the alarms would've rang a lot louder than a post on Mastodon.

But it's not harmful to update passwords and rotate 2FA credentials... so probably worth doing if you own AWS things.

•

hippy in reply to @Velocio

Amazon accounts and AWS accounts are intrinsically linked

Amazon just unlinked them, at least they forced a password reset because they're not the same accounts now. There was an email.
•

hamrack in reply to @Velocio

Did anything seem to come of this? There was a whole bunch of stuff on his mastodon for a day or so, but it's all been deleted now (/the links go to a 404) including the original post.

About

Avatar for Velocio @Velocio started