destroy-2A

This all breaks down as soon as audit realise the Devops team is also admin of the ci/cd stack and therefore all controls put in place to make it harder for a single actor to do bad stuff can be bypassed via this all powerful system.

I don’t think any LTE will give you a public routable address directly (unless you specifically request and pay a boatload for it) you will almost always be behind a CGN https://datatracker.ietf.org/doc/html/rfc6598

Interestingly nobody would be fined by the regulator had the misconfiguration not been discovered by someone stupid enough to to post about it with their real name, organised criminals would have been smarter about it. The misconfiguration on a “firewall” sounds like AWS is deep into the capital one org tightly controlling the narrative. Whilst at the end of the day it was an EC2 that had access to all the accounts S3 buckets that was configured to pass out its role token to anyone that asked and the bucket itself had no protection against outside access with a compromised key. This to me sounds like absolute negligence for an FI and rightfully deserves the fine. Back when this attack was done the AWS service made it very complex to mitigate against this type of attack and since then AWS have scrambled to release a bunch of “features” to fix this like Aws:calledvia , s3:resourceaccount condition key, s3 block public access came out just before attack was made public I am sure there were others but this is what I can recall.

Also when IAM integration is there it has patchy support for resource condition wildcards and condition keys which are usually not documented

I think the article is is saying it won’t lead to much of anything except headaches.

When Foxtel or Optus (cant remember probably both) entered Australian cable TV market they promised no adds, and there were zero adds, a few years later they introduced adds and increased the price in the same letter to subscriber. most people kept it.

How MSFT Squandered the opportunity they had with Skype, remember when Skype was used for everything by everyone way back... any broadcast on CNN or the like that involved a VC with some expert in far away lands had the skype logo on the VC. It was a lightweight app and you could VoIP just fine in terrible internet conditions. Something happened when MSFT purchased it - from that point on it just go progressively worse I don't think I remember them improving a single thing, then they came up with MS Teams... screwed it so bad and opened the door for an entire industry that wouldn't have existed at all if they didn't screw it over so bad.

I thought I was the only crazy person that hates anything that spins up a fan on my laptop. Why Java sets of fans when I spin up anything (even an empty spring project) in my IDE I just don’t understand. Even IntelliJ and eclipse with no project loaded seem to set off the fan.

It tries it’s best https://docs.aws.amazon.com/cli/latest/topic/s3-config.html#...

It’s not a huge problem thanks to S3 batch

https://aws.amazon.com/blogs/aws/new-amazon-s3-batch-operati...