News for hackers. Stuff that matters.

A comment on S3: Plus sign is interpreted as space in the path part of URLs. Parent comment

Re:S3: Plus sign is interpreted as space in the path part of... by tazjin on Wednesday October 04, 2017 @09:21AM (#15400242)
> So Amazon could easily have tested their client on 3rd party servers and still not spotted the problem

This would still be a red flag, as the service in question is their instance metadata service that provides authentication tokens.

Something that important should be integration-tested with the actual service.

[ Parent | on HN ]
Re:S3: Plus sign is interpreted as space in the path part of... by hnlmorg on Wednesday October 04, 2017 @09:38AM (#15400341)
> This would still be a red flag,

Perhaps I don't understand the issue you're discussing but how would the client working on 3rd party services be a red flag when that is the desired behavior?

[ Parent | on HN ]
Re:S3: Plus sign is interpreted as space in the path part of... by tazjin on Wednesday October 04, 2017 @09:49AM (#15400414)
Sorry if this was unclear: It's a client that they specifically wrote to talk to their own services, and they're releasing it to their customers as an official way to talk to their own services. It could not talk to their own service.

Their own documentation refers to that library (or did at that point in time, not sure about now).

[ Parent | on HN ]
Re:S3: Plus sign is interpreted as space in the path part of... by hnlmorg on Wednesday October 04, 2017 @09:55AM (#15400447)
Ahh I did misunderstand you then. Sorry. Yeah that does sound bad.
[ Parent | on HN ]