giggzy2 · HackerTrans

vor 7 Jahrendiscuss

Interestingly, the author of that Netflix article had joined CaptitalOne about a month before the incident.

vor 7 Jahrendiscuss

The S3 bucket was not public.

The hacker got ephemeral keys by remotely exploiting the WAF. The WAF had no reason to have privileges to read from S3, that was a mistake.

I’m unclear if data in bucket was encrypted at rest but I guess if you get keys to read it’s a moot point.

giggzy2

vor 8 Jahrendiscuss

Language compare and contrast is whats interesting to me.

I don't use either day to day but have had some exposure to both. I think both languages will have influence on future of language design at a minimum. Doubtful Perl does a phoenix routine but weirder things have happened.

giggzy2

vor 9 Jahrendiscuss

Interesting, confirmed my bias from read of abstract.

comments