Amazon is easy to social hack

If you have registered a website URL, you have to put a physical address for your ‘home’. You can pay extra to keep it unlisted, but that’s a yearly fee for what?
After reading this poor guys hassles, I am rethinking my listing…..

http://arstechnica.com/security/2016/01/how-amazon-customer-service-was-the-weak-link-that-spilled-my-data/

As a security conscious user who follows the best practices—using unique passwords, two-factor authentication, only using a secure computer, and being able to spot phishing attacks from a mile away—I thought my accounts and details would be pretty safe. I was wrong.

That’s because when someone went after me, all those precautions were for nothing. That’s because most systems come with a backdoor called customer support. In this post I’m going to focus on the most grievous offender: Amazon.com. Amazon.com was one of the few companies I trusted with my personal information. I shop there, I am a heavy AWS user (raking up well over $600/month), and I used to work there as a software developer.

My story began with a rather innocuous e-mail:

It is a bit of read, but the long story short is that a hacker got his web site registered address and used that to call Amazon and by asking them about where a ‘their’ last order was sent (turns out, the guy was smart and used the address of a nearby motel to register as his website URL address) and thus got his home address and phone number.
They then used this information to get his bank to send them a new credit card.
Once they had that, they went back to Amazon and got more information about the guy via their online chat.

Enough to say the guy has closed all his Amazon accounts and will never do business again with them.

I have no answer for this one. I am in the same place… I have a website, I have an Amazon account.
I am a ticking clock, just waiting to have my details leaked by some clueless customer rep. Bleh.