Reglikedomain industry desk

Amazon goes on two-factor domain binge following security notice

Amazon goes on two-factor domain binge following security notice

Firm registers 88 security-themed domains in useless exercise.

Photo of a Yubi FIDO U2F key in a black laptop. The Key is blue with a gold key emblem on a wood grain background

Amazon.com disclosed two fresh cybersecurity initiatives this stretch.

First, it is publicly releasing training materials that it uses with its own employees to prevent them from falling for the bad guys. Second, it’s going to offer free physical two-factor authentication keys to some AWS clients to help them protect their security.

Amazon usually registers domain names related to its announcements and this stretch was no exception. I count 88 fresh .com registrations on Wednesday related to the news. I struggle to find the point as I review the list. Although Amazon has taken 88 potential security risk domains off the open market, there are thousands more that someone could use to dupe someone. Give me 10 minutes, and I’ll find you at least a hundred variations of these domains that are still available and just as likely to trick someone.

So kudos to Amazon for its fresh security initiatives. But its domain registrations are akin to security theater.

(If you want to scare yourself regarding the state of cybersecurity, read This is How They Tell Me the World Ends.)

Here’s the full list of domains:

Amazon Domains
amaonaws-two-fa-device.com
amazon-2-fa-device.com
amazon-2-fa.com
amazon-2fa-device.com
amazon-2fa-devices.com
amazon-2fa.com
amazon-2fadevice.com
amazon-mfadevice.com
amazon-mfadevices.com
amazon-multi-factor-authentication.com
amazon-two-fa-device.com
amazon-two-fa-devices.com
amazon-two-fa.com
amazon-two-factor-authentication.com
amazon-twofa-device.com
amazon-twofadevice.com
amazon-twofadevices.com
amazon2-factorauthentication.com
amazon2fa.com
amazon2factorauthentication.com
amazon2fadevices.com
amazonaws-2-fa-devices.com
amazonaws-2-fa.com
amazonaws-2fa-devices.com
amazonaws-2fa.com
amazonaws-2fadevice.com
amazonaws-2fadevices.com
amazonaws-cybersecurity.com
amazonaws-mfa-device.com
amazonaws-mfa-devices.com
amazonaws-mfa.com
amazonaws-mfadevice.com
amazonaws-mfadevices.com
amazonaws-multi-factor-authentication.com
amazonaws-two-fa-devices.com
amazonaws-two-factor-authentication.com
amazonaws-twofa-device.com
amazonaws-twofa-devices.com
amazonaws-twofadevices.com
amazonaws2factorauthentication.com
amazonaws2fadevice.com
amazonaws2fadevices.com
amazonawscybersecurity.com
amazonawsmfa.com
amazonawsmfadevice.com
amazonawsmfadevices.com
amazonawsmulti-factorauthentication.com
amazonawstwo-fa.com
amazonawstwo-factorauthentication.com
amazonawstwofa.com
amazonawstwofactorauthentication.com
amazonawstwofadevice.com
amazonfreestream.com
amazonmfadevice.com
amazonmfadevices.com
amazonmulti-factorauthentication.com
amazontwo-fa.com
amazontwofa.com
amazontwofactorauthentication.com
amazontwofadevice.com
amazontwofadevices.com
aws-2-fa-devices.com
aws-2-factor-authentication.com
aws-2fa-device.com
aws-2fa.com
aws-2fadevice.com
aws-cybersecurity.com
aws-mfa-device.com
aws-mfa-devices.com
aws-mfa.com
aws-mfadevices.com
aws-multi-factor-authentication.com
aws-two-fa-devices.com
aws-two-factor-authentication.com
aws-twofa-devices.com
aws-twofadevice.com
aws-twofadevices.com
aws2-factorauthentication.com
aws2fa.com
aws2factorauthentication.com
aws2fadevices.com
awsmfadevices.com
awsmulti-factorauthentication.com
awstwo-fa.com
awstwo-factorauthentication.com
awstwofa.com
awstwofactorauthentication.com
awstwofadevices.com

Also on the wire

Other reporting from the domain desk.