News for hackers. Stuff that matters.

A comment on LastPass says DevOps engineer’s hacked computer led to security breach in 2022. Parent comment

Re:LastPass says DevOps engineer’s hacked computer led to se... by yunwal on Tuesday February 28, 2023 @11:28AM (#34971190)
aws-vault[0] does this, but only for aws creds

0 - https://github.com/99designs/aws-vault

[ Parent | on HN ]
Re:LastPass says DevOps engineer’s hacked computer led to se... by antihero on Wednesday March 01, 2023 @09:18AM (#34982630)
Yeah this is a good tool, if annoying at times.

A better way would be to not allow user accounts to deploy anything in any sort of prod accounts, instead only allowing this to happen through CI.

[ Parent | on HN ]