News for hackers. Stuff that matters.

A comment on Spyware Company Leaves ‘Terabytes’ of Selfies, Messages, Location Data Exposed. Parent comment

Re:Spyware Company Leaves ‘Terabytes’ of Selfies, Messages, ... by ryanmarsh on Thursday August 23, 2018 @04:47PM (#17830583)
AWS defines a pretty clear delineation of responsibilities. They are responsible for security of the cloud, you are responsible for security in the cloud.

https://aws.amazon.com/compliance/shared-responsibility-mode...

I’ve not seen AWS censor content, although I’m sure some cases might warrant it. That has nothing to do with a company that was negligent.

I don’t find AWS’ UI or command line clunky at all. In fact I find them clearer than most Unix tools.

It is not hard to know if you have world readable buckets in S3.

They should have a non-clunky dashboard of some sort where people can get a broad level overview of their security choices.

The AWS CLI allows you to easily pull the policy data attached to any resource and you can process it however you choose.

[ Parent | on HN ]
Re:Spyware Company Leaves ‘Terabytes’ of Selfies, Messages, ... by mehrdadn on Thursday August 23, 2018 @04:52PM (#17830619)
> I don’t find AWS’ UI or command line clunky at all. In fact I find them clearer than most Unix tools.

That's not setting a terribly high bar ;) those take a while to learn too, people just forget that they ever went through that stage.

[ Parent | on HN ]
Re:Spyware Company Leaves ‘Terabytes’ of Selfies, Messages, ... by the_new_guy_29 on Thursday August 23, 2018 @05:33PM (#17830873)
You get a BIG INFO by AWS that you are changing the bucket to public access if you do (by default they all are private), how incompetent you have to be to not be able to read?
[ Parent | on HN ]