3 ms·
Cloud Service Provider security mistakes
- aborsy 5y agoI didn’t expect the following from AWS: AWS employee posting customers’ secret credentials to GitHub Lightsail object storage secret access key leaked to CloudTrail logs
- egberts1 5y agoBe nice to see mistakes made by VPS providers as well. One of my VPS providers did not provide adequate firewalling for their customer’s browser-based VPN access to their own VPS’s JavaScript-based terminal console. Another is if you left your VPS shell un-logged-out of your VPS console, then the provider’s web-based JavaScript terminal console was weakly protected by your IP address filter-in but doesn’t prevent data-center from doing the same. It’s how hackers found out about it and started scanning a whole bunch of VPSs for logged-in console and installed cryptocurrency mining programs.