News for hackers. Stuff that matters.

A comment on Well, it's just an AWS Account ID. Parent comment

Re:Well, it's just an AWS Account ID by teractiveodular on Wednesday July 10, 2024 @01:34AM (#40923995)
No, enumeration would be if you can get the entire list of usernames somehow.
[ Parent | on HN ]
Re:Well, it's just an AWS Account ID by metadat on Wednesday July 10, 2024 @01:37AM (#40924007)
> No, enumeration would be if you can get the entire list of usernames somehow.

It's still a form of enumeration.

Once you know the generation scheme, you can always enumerate some form, perfect or otherwise.

[ Parent | on HN ]
Re:Well, it's just an AWS Account ID by vasco on Wednesday July 10, 2024 @02:40AM (#40924288)
Enumeration means a specific thing, that you get a full or paginated list of things and all you need to do is hit it. This isn't enumeration at all. It's like you saying you know the bucket keys to a hashtable so you can enumerate it by hitting them one by one, except in this case you don't even know the keys.
[ Parent | on HN ]
Re:Well, it's just an AWS Account ID by jadengeller on Wednesday July 10, 2024 @01:50AM (#40924061)
If there are rate limits, or if the search space is vast, this is notably more limited (even if arguably still enumeration)
[ Parent | on HN ]