5 ms·
If I got the same (I have not seen the same for my AWS accounts), I would start capturing DNS traffic ASAP. Either at the VPC or host level. Cheap and easy to d
by jeppesen-io 5y ago
If I got the same (I have not seen the same for my AWS accounts), I would start capturing DNS traffic ASAP. Either at the VPC or host level. Cheap and easy to do most of the time
If not running Java (including agents), it may indicate some other type of compromise. Not something you should really ignore. Look at logs, cpu, disk, port usage just to start
- laurent92 5y agoAll of this tells me that the number of possible vulns x the number of startups/companies managing their EC2 x numbers of OSes, libraries and platforms… Our current Internet is in an appalling state of security and keeping up to date will require tethering our OSes to something central that manages security upgrades very fast…
- anakaine 5y agoSo, communist security? Be damned any that have other dependencies, you will all get the same. The fruits of your labour will be shared amongst all for the security of all.
- burntoutfire 5y agoReal prioritization of software security (or quality for that matter) would require a radical rethink of our current software practices. It would be too costly, no one is ready to pay for it, so instead we hobble along with the current clusterfuck. As long as the current approach doesn't lose anyone billions of dollars, it will be deemed good enough (and even if it does, the cost of a secure rewrite of everything would probably be closer to trillions, not billions).