News for hackers. Stuff that matters.

A comment on Capital One Says Breach Hit 100M Individuals in U.S. Parent comment

Re:Capital One Says Breach Hit 100M Individuals in U.S by cameronbrown on Tuesday July 30, 2019 @07:26AM (#20563816)
Having everything locked down by default on AWS/Azure/GCP would go a long way to improving the security of the internet. Centralisation isn't healthy, but at least these companies could make a credible impact on data security by pushing the mentality.
[ Parent | on HN ]
Re:Capital One Says Breach Hit 100M Individuals in U.S by otterley on Tuesday July 30, 2019 @11:56AM (#20566111)
All AWS APIs are deny-by-default. Only if a pertinent policy (IAM or resource policy) grants access is it allowed.

IME, the usual mistake many implementors make is that they inadvertently grant too many privileges and often to the wrong audience.

[ Parent | on HN ]