6 ms·

I wonder if the authorities will be as quick to prosecute the leaker, who openly admits in public to breaking the law, as they are to attack the doners who have

by Canada 5y ago

I wonder if the authorities will be as quick to prosecute the leaker, who openly admits in public to breaking the law, as they are to attack the doners who have broken no laws and are entitled to privately support whatever side they choose.

purple_ferret 5y ago
Didn't he just query a publicly accessibly s3 bucket? What law did he break exactly?
- option 5y ago
  Even if the info was easily accessible, it seems to me that distributing PII should be against some laws.
- josephcsible 5y ago
  If you forget to lock the door to your house, am I allowed to go inside and start taking pictures of everything?
  - dzhiurgis 5y ago
    More fair analogy would be leaving your stuff outside, than inside but under unlocked door.
- Canada 5y ago
  I believe so, and that is a fair question. Also, I haven't seen proof that he was the only one. Did you watch the videos he posted? If so, what do you think about the situation? The whole thing is an awful mess.
- flavius29663 5y ago
  So if you use a version of Windows that is not updated and has a backdoor, is that fair game for "hackers" as well? It is "publicly accessible" for all intents and purposes. When does it become fair game? In the first day? 100th day? after 2 years?
- irthomasthomas 5y ago
  Any proof? Did Amazon confirm this? I know there was a file there that said the bucket was public, but that could have been added by the hackers as misdirection to sow doubt.
deleted 5y ago
[deleted]
seldom0 5y ago
I wonder what the RBAC permission history is for the bucket. If that's obtainable, the answer should be obvious.. if it was open from the beginning.
- inter_netuser 5y ago
  Payment data, including card data, was obtained as well. This would not be held by the crowdfunding platform, but by the payment processor only, that are subject to quite a few rules and annual audits. Definitely a hack. Besides, opening unlocked doors can still get you charged with break and entry, or in this case, unauthorized access.
  - deleted 5y ago
    [deleted]

by Canada 5y ago

purple_ferret 5y ago

Didn't he just query a publicly accessibly s3 bucket? What law did he break exactly?

option 5y ago
Even if the info was easily accessible, it seems to me that distributing PII should be against some laws.
josephcsible 5y ago
If you forget to lock the door to your house, am I allowed to go inside and start taking pictures of everything?
- dzhiurgis 5y ago
  More fair analogy would be leaving your stuff outside, than inside but under unlocked door.
Canada 5y ago
I believe so, and that is a fair question. Also, I haven't seen proof that he was the only one. Did you watch the videos he posted? If so, what do you think about the situation? The whole thing is an awful mess.
flavius29663 5y ago
So if you use a version of Windows that is not updated and has a backdoor, is that fair game for "hackers" as well? It is "publicly accessible" for all intents and purposes. When does it become fair game? In the first day? 100th day? after 2 years?
irthomasthomas 5y ago
Any proof? Did Amazon confirm this? I know there was a file there that said the bucket was public, but that could have been added by the hackers as misdirection to sow doubt.

deleted 5y ago

[deleted]

seldom0 5y ago

I wonder what the RBAC permission history is for the bucket. If that's obtainable, the answer should be obvious.. if it was open from the beginning.

inter_netuser 5y ago
Payment data, including card data, was obtained as well. This would not be held by the crowdfunding platform, but by the payment processor only, that are subject to quite a few rules and annual audits. Definitely a hack. Besides, opening unlocked doors can still get you charged with break and entry, or in this case, unauthorized access.
- deleted 5y ago
  [deleted]