15 ms·
I was wondering which cloud this was and from the screenshot, yep AWS S3. Especially these days you have to work hard to fail like this. I'm guessing this deplo
by squiffsquiff 2y ago
I was wondering which cloud this was and from the screenshot, yep AWS S3. Especially these days you have to work hard to fail like this. I'm guessing this deployment had been rotting for years.
- toomuchtodo 2y agoIt’s probably a bridge too far, but at this point, Amazon should be scanning for PI and other key indicators of sensitive data and proactively disabling public access for these buckets (if only from a reputational risk perspective) instead of waiting for researchers to find through hunting and scanning, and then reporting to the media.
- aspenmayer 2y agoSome people certainly are scanning for them: https://buckets.grayhatwarfare.com/ https://buckets.grayhatwarfare.com/