3 ms·

I just checked an EC2 console and I can see 19,356 snapshots created by other users. I am so confused. It would be trivial to make finding a snapshot require

I just checked an EC2 console and I can see 19,356 snapshots created by other users. I am so confused. It would be trivial to make finding a snapshot require knowing a unique ID like an AMI. And, why do I need to be able to search for 1000s of customers' public snapshots in the EC2 console? What conceivable purpose does that serve except being a giant opsec fail?

ggg3 7y ago
because having the bad guys go trhu the trouble of using a search engine like kuro et al will save the day?
jcims 7y ago
That’s per region, too.
judge2020 7y ago
looks like some bigger images were of wiki[pedia|media] backups so I guess easy-to-find/use public data?