3 ms·
No one has the source or binary code for the webserver AWS uses. It would be nearly impossible to write an exploit for it blind like that. Even if you did write
by dguido 11y ago
No one has the source or binary code for the webserver AWS uses. It would be nearly impossible to write an exploit for it blind like that. Even if you did write it blind, it would be a slow process that likely requires bruteforcing parts of the address space and there is no way you could do it without alerting Amazon.
tl;dr what you described is possible, I guess, but so incredibly unlikely it's not even worth thinking about.
- morgante 11y agoNobody has the source or binary code for dozens of proprietary systems which get hacked on a regular basis. In fact, I'd argue that most prominent hacks are of systems which are not open source.
- ossreality 11y agoAnd are probably, for example, IIS which I can at least open in a debugger or hexedit and look at. Some very-proprietary service serving S3 content? Yeah, right.
- rsync 11y ago"tl;dr what you described is possible, I guess, but so incredibly unlikely it's not even worth thinking about." How would you rate it, in terms of "worth thinking about", relative to USB keys picked up off of the ground to infect industrial controllers to make centrifuges wiggle the wrong way ? Where would you stick that in, you know, in your "worth thinking about it" spectrum ? Just curious.
- jmnicolas 11y agoI think it's not "worth thinking about" for someone that has to ask this question on HN.
- kriro 11y agoThat is a very weak argument. If anything I'd argue it's a net negative and not a positive that the code is closed from a security POV.
- deleted 11y ago[deleted]
- c22 11y ago> No one has the source or binary code for the webserver AWS uses. Surely someone has access to this. Likely many many people. Do you know who they all are? Do you trust all of them to be neither malicious or careless.