News for hackers. Stuff that matters.

A comment on Critical vulnerabilities in 6 AWS services disclosed at Black Hat USA. Parent comment

Re:Critical vulnerabilities in 6 AWS services disclosed at B... by hypeatei on Thursday August 08, 2024 @09:29AM (#41191269)
> And s3 buckets are not scoped to an account

Never used AWS, but how does it handle auth for data plane operations then?

[ Parent | on HN ]
Re:Critical vulnerabilities in 6 AWS services disclosed at B... by noctarius on Thursday August 08, 2024 @10:24AM (#41191877)
It handles authentication on a request basis (which was its own issue just a little while ago): https://www.infoq.com/news/2024/05/aws-empty-s3-bucket-billi...
[ Parent | on HN ]