News for hackers. Stuff that matters.

A comment on Harvesting credit card numbers and passwords from websites. Parent comment

Re:Harvesting credit card numbers and passwords from websites by saryant on Saturday January 06, 2018 @02:02PM (#16086867)
He'd have to somehow make outbound requests from the server. IIRC, the default AWS VPC config would prevent this. Not sure about other cloud environments.

Where I work, outbound requests must be made through proxy servers which have a whitelisted set of allowed domains, which is only allowed after a security review.

[ Parent | on HN ]
Re:Harvesting credit card numbers and passwords from websites by true_tuna on Saturday January 06, 2018 @07:25PM (#16088302)
AWS default VPC config whe does not block outbound by default. Neither in the security group nor the ACL. And of the half dozen AWS hosted startups I’ve worked for nobody restricts outbound yet. “Security nice to have, not prioritized yet”
[ Parent | on HN ]
Re:Harvesting credit card numbers and passwords from websites by tyingq on Saturday January 06, 2018 @04:11PM (#16087477)
You can exfiltrate data a number of ways though. DNS requests might be one obvious method.
[ Parent | on HN ]
Re:Harvesting credit card numbers and passwords from websites by mwarkentin on Saturday January 06, 2018 @04:16PM (#16087502)
AWS has GuardDuty now which can monitor for this type of traffic for pretty cheap.
[ Parent | on HN ]