[Deschodt]

So get this level of stupid:
Amazon set up an OTP (second factor authentication sending a code to my phone). Cool. Clearly someone breached my account last night and I received 15x OTPs around midnight, which locked the sending of new OTP codes so no dice..

This AM I call amazon support and after 2 transfers and all sort of security question and a stool sample, they say "we're gonna send you an OTP to change your password" - oops wait, they cannot because *they* blocked it ;-)

So they want me to wait till midnight tomorrow and call them again... I'm like are you serious ? a) sleeping b) if they do it again and block it again this is a catch 22 !!!

Sorry we can't help you... So in the meantime I was able to remove all credit cards from that account (somehow I can do that without an OTP with cached creds!!) and lock the credit cards online at the bank..

Anyway all this to say they cannot control their own security - Do get an 2nd factor authentication even if their OTP system is somewhat stupid (I'd be looking at bills otherwise) - or maybe OTP is a separate company in that case well played... Argh !