aws-dev

3 ms·

1. 1.▲
   by aws-dev 5y ago

   Fair enough. I went off the wikipedia definition ("vulnerability unknown to those who should be interested in its mitigation"), which doesn't mention it has to be known to the general public. We had to treat it as a zero-day
2. 2.▲
   by aws-dev 5y ago

   They don't provide access to other account data. These credentials are scoped down to a specific purpose. Colm mentions this here: https://twitter.com/colmmacc/status/1481682859324760070
3. 3.▲
   by aws-dev 5y ago

   Why do you say it's not a zero-day? It was unknown to AWS when they reported it.