Post

Hrm. Something has been logging into my credit union bank account multiple times for day for an unknown length of time from AWS. It never triggers 2FA, the IP changes every time, and as far as I can tell nothing is actually happening from it.

I want to rule out credential compromise because even my *username* is a random string, but I changed the password anyway. Time to see what breaks!

I also flipped on 2FA for all logins which I thought was already on. Sadly it's SMS even though this bank just had its phone app and website redesigned from the ground up like a month ago.