News for hackers. Stuff that matters.

A comment on Stop deploying web application firewalls. Parent comment

Re:Stop deploying web application firewalls by ForkMeOnTinder on Monday November 13, 2023 @04:22PM (#38255583)
It pairs well with the checkbox in S3 that you can tick to enable encryption with no other changes to your application.
[ Parent | on HN ]
Re:Stop deploying web application firewalls by meepmorp on Monday November 13, 2023 @04:48PM (#38255832)
Hey, if someone breaks into an AWS data center and steals some s3 drives, you're totally in the clear.
[ Parent | on HN ]
Re:Stop deploying web application firewalls by rigelina on Monday November 13, 2023 @05:46PM (#38256421)
You'd think that, but I had an auditor that had guidance requesting confirmation of security cameras on the servers. They wanted to drive to the AWS data center to see the cameras. If the drives got stolen, you'd better make sure AWS shares that video with you.
[ Parent | on HN ]
Re:Stop deploying web application firewalls by meepmorp on Monday November 13, 2023 @07:25PM (#38257236)
Ok, but what if someone bypasses the cameras on your servers with looped footage? Did the auditor think about having security cameras on the security cameras?

Amateurs.

[ Parent | on HN ]
Re:Stop deploying web application firewalls by montroser on Monday November 13, 2023 @08:24PM (#38257709)
Have they never seen Speed?
[ Parent | on HN ]