4 ms·
> the organizations that are denying it have no knowledge that it occurred Are you saying that Steve Schmidt, the AWS chief infosec officer didn't know about t
by mabbo 8y ago
> the organizations that are denying it have no knowledge that it occurred
Are you saying that Steve Schmidt, the AWS chief infosec officer didn't know about the hack? Or that his article [0] was published to purposely hide it?
If only one person in Amazon knew about it, it would be Schmidt. And if Schmidt knew, I don't think he'd write an article so strongly claiming Amazon doesn't know anything about it. The only thing in my mind that lends credence to Schmidt covering it up purposely is that $10B contract the Pentagon is putting out- perhaps they've told him to play ball as part of getting the contract. But even then it seems a stretch.
[0]https://aws.amazon.com/blogs/security/setting-the-record-straight-on-bloomberg-businessweeks-erroneous-article/ https://aws.amazon.com/blogs/security/setting-the-record-str...
- smokeyj 8y agohttps://en.wikipedia.org/wiki/Alex_Stamos#Yahoo https://en.wikipedia.org/wiki/Alex_Stamos#Yahoo!
- eganist 8y agoIt's very possible Steve wouldn't know, both owing to past precedent (see SmokeyJ's comment on Alex Stamos) and owing to whether or not he's cleared.
- lostapathy 8y agoHe about has to be cleared if he's the security chief over govcloud.
- eganist 8y agoWhoever directly oversees it and acts as the stakeholder for GovCloud should be, sure, but there's no reason for the person above the direct overseer to be cleared. Otherwise by that logic Bezos should be cleared as well.
- stevehawk 8y agoI may be mistaken but I'm fairly confident govcloud is an unclassified network.
- eganist 8y agoAt least publicly, they're acknowledged to go up to Secret right now. https://aws.amazon.com/blogs/publicsector/announcing-the-new-aws-secret-region/ https://aws.amazon.com/blogs/publicsector/announcing-the-new...
- snowwrestler 8y agoCISO is not the most likely point of crossover, the most likely point is the general counsel's office. Companies don't talk to the Feds without a lawyer, and they also don't issue high profile statements without a lawyer. And unlike the CISO, conversations with your lawyer are privileged.