Names of Canada truck convoy donors leaked after reported hack

Re:Names of Canada truck convoy donors leaked after reported... by 1024core on Monday February 14, 2022 @01:19PM (#30335785)

From the TC article:

It’s not known for exactly how long the bucket was left exposed, but a text file left behind by an unnamed security researcher, dated September 2018, warned that the bucket was “not properly configured” which can have “dangerous security implications.”

So... this has been a known problem since 2018. Time to stop tilting at windmills.

[ Parent | on HN ]

Re:Names of Canada truck convoy donors leaked after reported... by arbitrage on Monday February 14, 2022 @02:14PM (#30336794)

If it's all theater, then it's worth pointing out the A/C/M times of files are easy to fake. A competent intruder can feather filesystem times and modify logs to point investigators toward the wrong conclusion.

[ Parent | on HN ]

Re:Names of Canada truck convoy donors leaked after reported... by wizzwizz4 on Monday February 14, 2022 @02:23PM (#30336929)

Depends on the filesystem access. I didn't think Amazon buckets generally allowed that kind of thing.

[ Parent | on HN ]

Re:Names of Canada truck convoy donors leaked after reported... by kayodelycaon on Monday February 14, 2022 @03:03PM (#30337485)

It doesn't. There's no S3 API to change upload dates.

[ Parent | on HN ]

Re:Names of Canada truck convoy donors leaked after reported... by electroly on Monday February 14, 2022 @02:49PM (#30337280)

Not in an S3 bucket you can't. We're not talking about a filesystem here.

[ Parent | on HN ]