Ask HN: Gmail account security
One day I logged in to my Amazon account from a different country. Mind you, I have 2FA&#x2F;OTP enabled in my account, and I entered it correctly. They also made me click on a link they sent via email to &quot;verify my login&quot;.<p>A couple hours later my account was blocked due to &quot;suspicious login(s)&quot; (i.e. mine), and the order I placed cancelled. They had me wait 24h until I could contact someone at support that could unblock it. He told he was going to disable 2FA (?) and send me a code that I could use to change my password.<p>The code was sent via SMS.<p>They think that someone who has just my SIM card (or a clone, FFS) is more trustworthy than someone who has my password, 2FA token, and email address.<p>These companies take user security as a joke, or as pure theater.