News for hackers. Stuff that matters.

A comment on Ask HN: Our AWS account got compromised after their outage. Parent comment

Re:Ask HN: Our AWS account got compromised after their outage by perpil on Tuesday October 21, 2025 @07:09PM (#45662923)
This is not about the AWS Console. It is talking about the customer's site hosted on CloudFront. It is possible to cross wires with user sessions when using CloudFront if you haven't set caching granular enough to be specific to an end user. This scenario is customer error, not AWS.
[ Parent | on HN ]
Re:Ask HN: Our AWS account got compromised after their outage by fulafel on Wednesday October 22, 2025 @02:56AM (#45665707)
I'd argue it's a classic footgun and a flaw of CloudFront (they should at least warn about it much more).
[ Parent | on HN ]