alphamacaroon

4 ms·

1. 1.▲
   by alphamacaroon 6y ago

   Agreed. But the problem is— I've never once given serverless my credentials... The specific instance in this case is that there is portion of serverless (called serverless-components) where it appears to boost them from your `~/.
2. 2.▲
   by alphamacaroon 6y ago

   The other scary part to all of this is that the AWS credentials for deployments are usually pretty super-powered. If I was a hacker, I guess I know what servers I'd have my sights set on right now. A goldmine for super-powered AWS cred
3. 3.▲
   Using serverless.com? Your AWS creds and code are being shared with them

   16 points by alphamacaroon 6y ago|7 comments