News for hackers. Stuff that matters.
Re:The AWS S3 Denial of Wallet Amplification Attack by klabb3 on Wednesday May 01, 2024 @06:25PM (#40230362)
That’s an orthogonal issue. There’s no interpretation of “egress” that means “stuff we do internally before leaving aws data centers”. If the tcp conn is reset only a few MB would leave aws frontend servers. Instead, it appears they’ve been basing the number off the range in the request and/or whatever internal caching/loading they’re doing within S3, which again has nothing to do with egress.

I mean, we already know egress is short for egregious. It’s an incredibly bad look to be overestimating the “fuck you” part of the bill.

There are no comments on this comment yet.