4 ms·
> He found the data was sitting in an Amazon Web Services storage "bucket," left open to anyone with an account, This is hard to believe. S3 bucket names are u
by hashkb 9y ago
> He found the data was sitting in an Amazon Web Services storage "bucket," left open to anyone with an account,
This is hard to believe. S3 bucket names are unique. I can't make a bucket named `bucket`; I'd have to call it `dashkb-bucket` or something (a common convention is to prefix with your company's domain)... anyway...
The point is: for the bucket to be named `bucket` Alteryx must have had one of the very first AWS accounts, and from there isn't it reasonable to assume this bucket has been exposed for many years?
- egypturnash 9y agoThis sentence is not saying that "bucket" is the name of the bucket. It is saying that the data was in a thing that Amazon Web Services provides, which AWS calls a "bucket". Most people who are not web developers don’t even know Amazon Web Services is a thing, much less the cute names of any of their services.