4 ms·
Important to be clear that 'AWS engineer' is mostly a coincidence. This is not believed to have relied on any internal knowledge or access. Though the data was
by ZiiS 4y ago
Important to be clear that 'AWS engineer' is mostly a coincidence. This is not believed to have relied on any internal knowledge or access. Though the data was also on AWS and arguably they could have made it easier to correctly configure the compromised WAF.
https://krebsonsecurity.com/2019/08/what-we-can-learn-from-the-capital-one-hack/ https://krebsonsecurity.com/2019/08/what-we-can-learn-from-t...
- ed25519FUUU 4y agoYeah that seems like a really click-baity part of the article, like she used some internal thing to pull it off. It appears she just worked at AWS at some point before she downloaded the data.