4 ms·
Sounds less like intrusion and more like accidental exposure by Capital One.
by thinkmassive 7y ago
Sounds less like intrusion and more like accidental exposure by Capital One.
- deleted 7y ago[deleted]
- sdinsn 7y agoIt sounds like an internal threat to me (she was an employee at Amazon).
- lawnchair_larry 7y agoNot at the time of the hack. Insider access was not used.
- thinkmassive 7y agoI stand corrected. It sounds like she exploited a vulnerability that allowed her to assume an IAM role with access, rather than the S3 public permissions I previously assumed. https://news.ycombinator.com/item?id=20560594 https://news.ycombinator.com/item?id=20560594