Ubiquiti developer charged with extortion, causing 2020 “breach”

Re:Ubiquiti developer charged with extortion, causing 2020 “... by lars_francke on Monday December 06, 2021 @01:30AM (#29456830)

> * Why was it so easy for a lead engineer to get access to a root AWS user without anyone else being notified? I.e. AWS GuardDuty provides FREE alerting for when an AWS root IAM account is logged in or used, this account should be under lock and key and when used, confirmed and audited by relevant persons or teams.

I had never heard of GuardDuty so I got curious. It doesn't seem like there's a free tier available for it: https://aws.amazon.com/guardduty/pricing/ In fact at larger scales it seems pretty expensive even.

[ Parent | on HN ]

Re:Ubiquiti developer charged with extortion, causing 2020 “... by LilBytes on Monday December 06, 2021 @03:35AM (#29457550)

You're absolutely right. I had not noticed. I'd say this was to do with GuardDuty isn't free but has consistently been such a small line item on my AWS bills that I thought it was free.

Thank you for the correction.

All the same the point I was trying to drive is when the service is incredibly effective, both in practice and cost, it should in nearly all instances be implemented.

Edit: I wanted to amend my statement but the window to make those changes has passed.

[ Parent | on HN ]

Re:Ubiquiti developer charged with extortion, causing 2020 “... by lars_francke on Tuesday December 07, 2021 @04:00AM (#29470389)

Thanks. This seems like a service that _should_ be free and enabled by default at least with a subset of options for the root account.

[ Parent | on HN ]