3 ms·

AWS ReInvent 2017 is going right now in Las Vegas, the number of attendees is about 40000, and I'm wondering how many laptops can be attacked using this techniq

by buryat 9y ago

AWS ReInvent 2017 is going right now in Las Vegas, the number of attendees is about 40000, and I'm wondering how many laptops can be attacked using this technique. The `root` user stays in the system, so one just need to create it and open SSH quickly, and later they can do whatever they please.

the_duke 9y ago
I really hope there's an extra zero in your 40000.
- buryat 9y ago
  Maybe closer to 35000, but yeah, that's the scale of ReInvent, last year AWS reported 24000 attendees. I was there last year, that's a lot of people https://aws.amazon.com/blogs/apn/why-sponsor-aws-reinvent-2016/ https://aws.amazon.com/blogs/apn/why-sponsor-aws-reinvent-20...
Washuu 9y ago
Unlikely any AWS imaged employee MacBooks at least. AWS IT back in the beginning of October forbade employees to not upgrade to High Sierra.
- buryat 9y ago
  There're a lot of attendees from a lot of companies, they can be vulnerable.
- iaml 9y ago
  Forbade to not upgrade? So, forcefully install?
joshuaturner 9y ago
This reminds me of the jailbreaking scene a few years back. I was at an event centered around jailbreaking, and you were able to ssh into 80% of users iOS devices by using the default root password, alpine.