News for hackers. Stuff that matters.

A comment on AWS Support able to access any S3 object due to permission change. Parent comment

Re:AWS Support able to access any S3 object due to permissio... by benlivengood on Thursday December 23, 2021 @01:14PM (#29664642)
When I was at Facebook (2018-2020) there were in fact few permission barriers (click through the screen warning you to follow the rules, and that's at the UI level not to mention pulling stuff directly from Tao through the old PHP interfaces still laying around, or just building a user context from scratch), but plenty of auditing and automated detection.
[ Parent | on HN ]
Re:AWS Support able to access any S3 object due to permissio... by ummonk on Thursday December 23, 2021 @01:50PM (#29665070)
I always did wonder how good the detection systems would be at catching people who access private data directly from Tao.
[ Parent | on HN ]
Re:AWS Support able to access any S3 object due to permissio... by WFHRenaissance on Thursday December 23, 2021 @03:02PM (#29665841)
I've heard stories of same day firings, but never saw it myself. Maybe it was a myth put forth to dissuade the curious.
[ Parent | on HN ]