News for hackers. Stuff that matters.

A comment on Uber Paid Hackers to Delete Stolen Data on 57M People. Parent comment

Re:Uber Paid Hackers to Delete Stolen Data on 57M People by Cthulhu_ on Wednesday November 22, 2017 @03:40AM (#15755298)
But you have to put them somewhere; how is idk, AWS credential management secured?
[ Parent | on HN ]
Re:Uber Paid Hackers to Delete Stolen Data on 57M People by tskaiser on Wednesday November 22, 2017 @03:47AM (#15755335)
Store credential information where it is used. It is not used by the repository, so it is an improper location for it.

If someone gains access to a system that uses the credentials, then there is, in principle, no difference between puppeteering that system versus stealing its credentials.

[ Parent | on HN ]