News for hackers. Stuff that matters.

A comment on Capital One’s breach was inevitable, because we did nothing after Equifax. Parent comment

Re:Capital One’s breach was inevitable, because we did nothi... by AshwinDurairaj on Tuesday July 30, 2019 @07:20AM (#20563783)
Basically, I gathered from the indictment that they had a 'WAF misconfiguration', which I take to be SSRF allowing her to obtain temporary AWS credentials from the metadata endpoint, which have the WAF role they talked about, which has sufficient permissions to list buckets and download files etc.
[ Parent | on HN ]
Re:Capital One’s breach was inevitable, because we did nothi... by jcims on Tuesday July 30, 2019 @08:21AM (#20564132)
This is precisely my read as well. Could be cred disclosure through a stackdump or the like as well but most likely SSRF.
[ Parent | on HN ]