Amazon has quietly closed a serious security hole in Kindle devices that made it possible for attackers to hijack customer accounts simply by getting a malicious audiobook or e-book onto an e-reader.

Authentication tokens aren't actual physical tokens, of course. But when these digital identifiers aren't expired regularly or pinned for use by a specific device only, they may as well be made of ...