News for hackers. Stuff that matters.

A comment on Hosting your entire web application using S3 and CloudFront.

Re:Hosting your entire web application using S3 and CloudFront by papaf on Sunday July 12, 2020 @05:11AM (#23810031)
As far as I can see, it is possible for all internet users to see customers orders and addresses using this technique.

Did I miss something or is this a real problem?

[ Parent | on HN ]
Re:Hosting your entire web application using S3 and CloudFront by root993 on Sunday July 12, 2020 @11:05AM (#23811905)
Yes but each order has a unique ID which only the customer who placed that order will have access to. If that customer decides to share that URL on his own discretion that is fine by us
[ Parent | on HN ]