6 ms·

I agree. The AWS interfaces are poorly designed, difficult enough to use well that "mistakes" are statistically guaranteed to happen. It is laughable to hold

I agree. The AWS interfaces are poorly designed, difficult enough to use well that "mistakes" are statistically guaranteed to happen. It is laughable to hold those who make S3 buckets public accountable yet underplay the contribution of interface design. It's as if the NTSB had a report template with only a single checkbox for "pilot error".

nfRfqX5n 4y ago
S3 buckets are private by default. I'm pretty sure it warns you very heavily when making items public too.
- ghaff 4y ago
  Yeah, AWS lets you do things--especially related to billing--that can really burn you if you make a mistake or don't know what you're doing. But making S3 buckets public is something they've really put guardrails on over time.
  - djitz 4y ago
    I’ve always found the main issue is not how easily you can make a bucket public, it’s knowing how to utilize a private bucket to serve assets or media in the first place.
- evntdrvn 4y ago
  They are now, but IIRC that was not previously the case.
  - everfrustrated 4y ago
    S3 Buckets have _always_ been private by default.
stef25 4y ago
S3 buckets are now very clearly labelled as being public, perhaps even private by default. Not so long ago this wasn't the case and various grey hat services would let you explore public buckets via a nice interface / API. What you could find was pretty shocking. The idea of "don't use it if you don't know how" still applies though. In this world so many things can go wrong if you don't understand what button does what but that's not an excuse imho - AWS isn't designed for non technical people.
mwint 4y ago
This used to be worse than it is now. Today there’s all kinds of warnings about buckets that can be publicly accessed. It takes quite a bit of work to make one public, not something you’d do without knowing anymore.
ranman 4y ago
1) I think your opinion here is 3-4 years out of date. Check out the modern interfaces. 2) at a bank's scale it should not be using the console for anything in production.
- rbanffy 4y ago
  Banks also use Excel and VBA macros for a lot of things that deeply scare me. It feels like the planet’s financial systems are kept together by spit and prayer.

nfRfqX5n 4y ago

S3 buckets are private by default. I'm pretty sure it warns you very heavily when making items public too.

ghaff 4y ago
Yeah, AWS lets you do things--especially related to billing--that can really burn you if you make a mistake or don't know what you're doing. But making S3 buckets public is something they've really put guardrails on over time.
- djitz 4y ago
  I’ve always found the main issue is not how easily you can make a bucket public, it’s knowing how to utilize a private bucket to serve assets or media in the first place.
evntdrvn 4y ago
They are now, but IIRC that was not previously the case.
- everfrustrated 4y ago
  S3 Buckets have _always_ been private by default.

stef25 4y ago

S3 buckets are now very clearly labelled as being public, perhaps even private by default. Not so long ago this wasn't the case and various grey hat services would let you explore public buckets via a nice interface / API. What you could find was pretty shocking. The idea of "don't use it if you don't know how" still applies though. In this world so many things can go wrong if you don't understand what button does what but that's not an excuse imho - AWS isn't designed for non technical people.

mwint 4y ago

This used to be worse than it is now. Today there’s all kinds of warnings about buckets that can be publicly accessed. It takes quite a bit of work to make one public, not something you’d do without knowing anymore.

ranman 4y ago

1) I think your opinion here is 3-4 years out of date. Check out the modern interfaces. 2) at a bank's scale it should not be using the console for anything in production.

rbanffy 4y ago
Banks also use Excel and VBA macros for a lot of things that deeply scare me. It feels like the planet’s financial systems are kept together by spit and prayer.