Max-Ganz-II

8 ms·

31.
by Max-Ganz-II 2y ago
I've not watched the video, but going on the title, I have to say, I have my Framework, and I absolutely love it to bits. It was relatively expensive, but in absolute terms the difference is minor; and now I have something where I don&
32.
by Max-Ganz-II 2y ago
Replacement system tables for Amazon Redshift. Thinking a free and paid version. Free is everything, but runs on the existing system tables; so it's slow, and so a six day history only. Paid has a system table archiving mechanism, so y
33.
by Max-Ganz-II 2y ago
> I assume the exploit only takes down your own instance, not the whole AWS redshift service. First yes for this. > If it's the latter, it should obviously be rewarded with big $. Second yes for this. :-)
34.
by Max-Ganz-II 2y ago
I Googled for AWS bug bounty programs. I found nothing. Do you have a URL of any kind, for more information about this, including contacts?
35.
by Max-Ganz-II 2y ago
Thank you everyone who replied. I feel like I have a better understanding now of the situation and what happened with H1, and I feel better about it. I will now see if I can figure out how to wipe everyone's RS clusters instantly with
36.
by Max-Ganz-II 2y ago
Yes and yes :-)
37.
by Max-Ganz-II 2y ago
Just as an aside, I don't think your query is directly logged. I've not actually checked, so I don't know, but knowing how logging works on RS, I think the cluster crashing will mean your killer query is not logged. Your sess
38.
by Max-Ganz-II 2y ago
Good point. The problem I know of is a bit different, in that it is a direct and immediate server crash. It's not a denial of service by making the cluster slow. It's run-query, crash-server. You are right of course that any nor
39.
by Max-Ganz-II 2y ago
I have to say, I did not have a positive first experience with H1. Probably mainly my misunderstanding, but H1 did not help in any way. I opened an account, filed a report - I can easily crash Amazon Redshift as an unprivileged user. Provi
40.
by Max-Ganz-II 2y ago
This makes sense and I see it, but there is one matter which gives me pause; when I came to submit the issue, there's some kind of standard severity rating system, which you have to fill in. Questions like - can this issue be exploite
41.
by Max-Ganz-II 2y ago
No. It's not a way to get in, but it is a way to crash a system (which should not be crashable) if you are in.
42.
by Max-Ganz-II 2y ago
I may be completely wrong, but that seems a bit narrow a definition - attackers move laterally once they penetrate organizations. I can also imagine disgruntled or malicious employees or contractors.
43.
by Max-Ganz-II 2y ago
Being able to create a table and issue a query means being a normal user on the cluster - so you have an account and can log in. It's enough to issue `CREATE USER [blah] PASSWORD [pwd];`, which is the minimum create user command. So w
44.
Advice sought regarding HackerOne and vulnerability submission
3 points by Max-Ganz-II 2y ago|8 comments
45.
by Max-Ganz-II 2y ago
Amazon Redshift very recently has made this the default choice.
46.
by Max-Ganz-II 2y ago
Why, man, they did make love to this employment; They are not near my conscience; their defeat Does by their own insinuation grow: 'Tis dangerous when the baser nature comes Between the pass and fell incensed points Of m
47.
by Max-Ganz-II 2y ago
I love this XKCD. I have a bookmark for it, and whenever I want to kick back a bit, perfect. However, I've noticed that it has a tendency to go blank (i.e. fail and stop working) when multiple colour spectrum triangles are in play and
48.
by Max-Ganz-II 2y ago
1. Temp tables are a bad idea, last I knew, because they increase the amount of data in the system tables (every time you create a temp table, you create records for it, it's MVCC, so they don't go away until VACUUMed) and system
49.
by Max-Ganz-II 2y ago
Regarding usage, I was on SO. I specialize in Amazon Redshift. I've written a lot of PDFs about Amazon Redshift - serious stuff, deep technical investigations and explanations, published along with the source code which produces the ev
50.
by Max-Ganz-II 2y ago
SEEKING WORK Digital nomad, relocate and remote both good. Technologies : Amazon Redshift Web-site : https://www.redshiftresearchproject.org In particular, now offering cluster cost reduction. Fee is and only is one month of th
51.
Redshift Research Project Cross-Region/Node-Type Benchmarks Now Gnuplots
1 points by Max-Ganz-II 2y ago|0 comments
52.
Redshift Research Project Version Tracker Improvement
1 points by Max-Ganz-II 2y ago|0 comments
53.
by Max-Ganz-II 3y ago
Rather the same here. A month or two after my main account was banned (see my other post in this thread), I logged into a second account which I'd not logged into for months. Upon logging in, I discovered the account was "permanen
54.
by Max-Ganz-II 3y ago
My account on Reddit, and so as I am the founder also the sub r/AmazonRedshift, on 2023-09-30 looked to have been banned by an automated system. The sub appeared to be working normally, I posted about the Amazon Redshift Serverless PDF
55.
by Max-Ganz-II 3y ago
I specialize in Amazon Redshift. Speaking for and only for Amazon Redshift, as I have little knowledge of other AWS services, I hold AWS's blogs, messaging, Support communications, TAMs, the lot, as relentlessly positive and to my eye
56.
I've just had a dental filling without anesthetic
3 points by Max-Ganz-II 3y ago|4 comments
57.
by Max-Ganz-II 3y ago
This is not quite what it seems. What happens as you pile mass into a planet is that the planet becomes dense , not large , and this is because of gravity. Jupiter has more than twice the mass of Saturn, but is only moderately larger in d
58.
by Max-Ganz-II 3y ago
I had a sub on reddit, r/AmazonRedshift, for two years, which about two months ago was deleted, without warning, reason, notification or any mechanism for appeal, I think by an automated system (the owning account was shadow-banned, wh
59.
Amazon Redshift 1.0.61395 is out – system table changes review
2 points by Max-Ganz-II 3y ago|0 comments
60.
Redshift Research Project: Late-Binding Views [pdf]
1 points by Max-Ganz-II 3y ago|0 comments

More ›