News for hackers. Stuff that matters.

A comment on Defense Contractor Left Sensitive Pentagon Files on Unprotected AWS S3 Bucket. Parent comment

Re:Defense Contractor Left Sensitive Pentagon Files on Unpro... by QuinnyPig on Wednesday May 31, 2017 @12:14PM (#14453630)
I'm wondering if they were bitten by the semi-common "any authenticated user" misunderstanding. That maps to any user in all of S3, not just your account.
[ Parent | on HN ]
Re:Defense Contractor Left Sensitive Pentagon Files on Unpro... by unclesaamm on Wednesday May 31, 2017 @12:47PM (#14453938)
Much more likely for it to be the ole "Download it quickly and I'll make it private"

Edit: After reading the article, I have no idea what could explain this. They had a dozen passwords in there as well..

[ Parent | on HN ]