8 ms·

I think someone is trying to cover their ass. Think about how this story could have been written: the WSJ reaches out to current and former employees and writes

I think someone is trying to cover their ass. Think about how this story could have been written: the WSJ reaches out to current and former employees and writes what they say. Those cyber security employees are already feeling the heat and want to preserve their reputation, so they throw someone else under the bus. This was an inside hack by a former AWS employee. It was difficult to protect against. I can't fault Capital One here as much as I can fault AWS. There will always be tension between the Security team and the rest of the company.

cheeze 7y ago
> former AWS employee I've yet to see anything that would imply that being an ex employee helped. It seemed that she used a "public" attack vector.
- ozymandias12 7y ago
  She was a AWS insider. Aware of the common env configurations should have in place and aware that Capital had a few places to poke here and there. I hardly call this a hack. This is more a cake recipe she followed thanks to working directly on AWS and being a crook.