News for hackers. Stuff that matters.

A comment on Thousands of secret keys found in Android apps. Parent comment

Re:Thousands of secret keys found in Android apps by cheald on Thursday June 19, 2014 @03:42AM (#7914877)
AWS keys should belong to IAM users who have constrained permissions to only perform the things you want them to perform.

If you're shipping root account AWS keys in any app, you're doing it wrong.

[ Parent | on HN ]

There are no comments on this comment yet.