News for hackers. Stuff that matters.

A comment on Capital One Says Breach Hit 100M Individuals in U.S. Parent comment

Re:Capital One Says Breach Hit 100M Individuals in U.S by jorblumesea on Monday July 29, 2019 @09:37PM (#20561297)
Not sure if this is a reputable source: https://heavy.com/news/2019/07/paige-adele-thompson/

But sounds like she's an engineer that used to work in aws, specifically S3. If true, seems likely as she would have insider knowledge of existing attack vectors and possibly vulns. Maybe even using something we discovered while on the job.

[ Parent | on HN ]
Re:Capital One Says Breach Hit 100M Individuals in U.S by bifrost on Tuesday July 30, 2019 @12:32AM (#20562158)
If this is true, this is a great reason for people to stop using S3 or to start doing daily bucket audits. Or you know, not store PII in the cloud poorly.
[ Parent | on HN ]
Re:Capital One Says Breach Hit 100M Individuals in U.S by lanstin on Tuesday July 30, 2019 @02:58PM (#20568009)
Really, sensitive data should not be stored unencrypted. It just shouldn't.
[ Parent | on HN ]
Re:Capital One Says Breach Hit 100M Individuals in U.S by bifrost on Wednesday July 31, 2019 @02:26AM (#20572106)
Or on S3, because unencrypted is just an API call away.
[ Parent | on HN ]