Sign in / up

Reply to post: Still smells like an API flaw to me

Baffled by bogus charges on your Amazon account? It may be the work of a crook's phantom gadget

Loyal Commenter Silver badge

Still smells like an API flaw to me

Possibly a session-hijacking flaw that allows a bad actor to MITM a legitimate session between a device and Amazon's servers and use it to add a bogus device?

POST COMMENT House rules

Not a member of The Register? Create a new account here.

Forgotten password ?

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon