News for hackers. Stuff that matters.

A comment on Critical Vulnerability: AWS Credential Disclosure.

Re:Critical Vulnerability: AWS Credential Disclosure by vanilla on Monday April 07, 2014 @04:23PM (#7549200)
There was a Blog-post on HN 10 days ago, showing Amazon is actively scanning for this and warns developers.

https://news.ycombinator.com/item?id=7491272

it also predates this blog post

[ Parent | on HN ]
Re:Critical Vulnerability: AWS Credential Disclosure by Patrick_Devine on Monday April 07, 2014 @04:53PM (#7549405)
Yeah, I'm not sure how anyone could consider this a "Critical Vulnerability". It's kind of cool and slightly frightening that Amazon scans for API keys. I'd love to know how they're going about the scan though; maybe using excess capacity to do a crawl and analyzing the results? Maybe through Alexa?
[ Parent | on HN ]