News for hackers. Stuff that matters.

A comment on Twilio: Someone broke into our AWS S3 silo, added 'non-malicious' code to JS SDK. Parent comment

Re:Twilio: Someone broke into our AWS S3 silo, added 'non-ma... by mcraiha on Wednesday July 22, 2020 @12:21PM (#23918638)
Is there a service that one could use to check if their bucket accepts public uploads or public ACL changes?
[ Parent | on HN ]
Re:Twilio: Someone broke into our AWS S3 silo, added 'non-ma... by mwarkentin on Wednesday July 22, 2020 @12:47PM (#23918905)
Aws S3 surfaces this info now, as well as allowing you to enforce that they’re disabled at the bucket or account level (public access blocks).
[ Parent | on HN ]