Learn More
Resend Email
55
Worst security bug/feature you've seen?
Week 25 Group Rant
igokith
10y

My coworker shared account keys of Amazon aws on a public repo at Github. Took me around 3 days to find out and about 20 ec2 instances were created and running by a hacker...

undefined

wk25
Favorite
Ranter
Comments
  • 2
    10y
    Ouch! Doesn't github warn you about keys nowadays?
  • 3
    10y
    @Charmgoggles Im not sure. Maybe my colleague overlooked it. But amazon emailed us and gave us a link to the specific file that contains the keys.
  • 7
    10y
    I've been there. Actually wrote a long rant about it here. Except I was the clown that actually leaked the keys
  • 0
    10y
    Ouch. Why not use private repo's?
  • 5
    10y
    How sweet of the hacker to not delete your instances.
  • 0
    10y
    @mcraz well then people would notice faster, so it's a bad idea
Related Rants
devRant © 2021 Hexical Labs LLC
Privacy Policy  |  Terms of Service
Add Comment