News for hackers. Stuff that matters.

A comment on NordVPN confirms it was hacked. Parent comment

Re:NordVPN confirms it was hacked by defined on Tuesday October 22, 2019 @08:36AM (#21322882)
Support for your assertion: https://rhinosecuritylabs.com/cloud-security/aws-security-vu...
[ Parent | on HN ]
Re:NordVPN confirms it was hacked by jessaustin on Tuesday October 22, 2019 @09:35AM (#21323414)
That's a great link, but they're looking at "misconfigurations". How is that relevant here?
[ Parent | on HN ]
Re:NordVPN confirms it was hacked by defined on Tuesday October 22, 2019 @10:08AM (#21323732)
> Since the metadata service doesn’t require any particular parameters, fetching the URL http://169.254.169.254/latest/meta-data/iam/security-credent... will return the AccessKeyID, SecretAccessKey, and Token you need to authenticate into the account.

They talk about the AWS “Metadata Service” Attack Surface and how juicy a target it is. I was just providing support for that opinion.

[ Parent | on HN ]