4 ms·
1) Agree. Let's say 99,99% "unhackable", meaning known threats, meankng AWS would need to be hacked. 2) The whole bucket is public for open/download, all files
by bikamonki 12y ago
1) Agree. Let's say 99,99% "unhackable", meaning known threats, meankng AWS would need to be hacked.
2) The whole bucket is public for open/download, all files are static resources (html, js and css). So hacking in this case means defacing or taking the site down.
3) and 4) Will double check but let's assume pwds cannot be broken.
- smt88 12y agoThat sounds fine as far as what you have control over. After that, you're relying on the security of AWS. That means 2FA is your only line of defense in this case. Your main points of failure are: AWS, your password manager (if you use one), your OS (if you have malware), and your internet connection. For AWS, you can enable 2FA and optionally get a physical device that is not your phone. That would help, since your phone is something you carry around a lot and possibly lose. For your password manager, if you're using a cloud-based manager, you could easily be vulnerable. Who knows if those services are really as secure as they say. For your OS, you certainly need to have excellent anti-malware software, as well as good security practices (no Java enabled in your browser, up-to-date plugins, no running of unknown/pirated programs or games). For your internet connection, you should get an HTTP Everywhere-like plugin for your browser. You can't do a whole lot else.
- bikamonki 12y agoThx, you helped me see a broader picture!