News for hackers. Stuff that matters.

A comment on Hacking misconfigured AWS S3 buckets: A complete guide.

Re:Hacking misconfigured AWS S3 buckets: A complete guide by paulpauper on Monday September 09, 2024 @01:18PM (#41490877)
Thinking about creating intentionally misconfigured buckets with encrypted files that look like they have valuable stuff so the hackers waste tons of resources decrypting them only to see they are worthless
[ Parent | on HN ]
Re:Hacking misconfigured AWS S3 buckets: A complete guide by csto12 on Monday September 09, 2024 @01:32PM (#41491066)
Couldn’t this backfire by possibly generating a large AWS bill?
[ Parent | on HN ]
Re:Hacking misconfigured AWS S3 buckets: A complete guide by paulpauper on Monday September 09, 2024 @01:55PM (#41491357)
they would copy the file offline and decrypt it there
[ Parent | on HN ]
Re:Hacking misconfigured AWS S3 buckets: A complete guide by edwinbalani on Monday September 09, 2024 @04:05PM (#41492973)
It costs money to serve S3 objects out to the internet though. S3 GET request billing + the usual AWS egress fees, after you've burned through the free quotas. Egress is currently $0.09 per GB + tax.
[ Parent | on HN ]
Re:Hacking misconfigured AWS S3 buckets: A complete guide by itintheory on Monday September 09, 2024 @06:13PM (#41494694)
Make the bucket requester-pays https://docs.aws.amazon.com/AmazonS3/latest/userguide/Reques...
[ Parent | on HN ]
Re:Hacking misconfigured AWS S3 buckets: A complete guide by bandie91 on Tuesday September 10, 2024 @07:08AM (#41499534)
even failed (403) PutObject costs money.
[ Parent | on HN ]