Great article.. I actually emailed Amazon support, referenced this article and a few of the comments below. Told them to have it escalated and to have a manager call me.

I work Information Security quite a bit, I worked at LifeLock, and I worked as an Security Engineer at PayPal, so I know that protecting against these types of attacks 100% is nearly impossible, but this guy barely had to try. Thats cary..