Collaborate Disseminate
A defense contractor has secured an Amazon S3 bucket containing sensitive intelligence data after accidentally leaving it publicly exposed.
David Bisson reports.
Continue reading US defense contractor secures Amazon S3 bucket after leaving sensitive data publicly exposed
I’m building an app and a server. The server is a node.js API with a Postgres backend.
Images created in the app will be stored at Amazon S3. Metadata about the files will be stored in Postgres.
I have zoomed in at two poss… Continue reading File encryption design
The system I am working on primarily use Google App Engine for my main web app and Amazon Cloudfront/S3 for hosting static data.
Now as an audit exercise this question is out to me:
Are the internet facing components of… Continue reading Do AWS and GAE use DMZ?
I believe Amazon states that all deletions of objects are irreversible. But for security reasons, how “shreded” is such deletion? For example, supposing a hack to Amazon S3, could anyone recover your deleted data?
Continue reading Does Amazon S3 deletion "shred" your object
Our mobile app will be uploading images to AWS S3. The question is whether to do one of the following options:
Upload the image to our APIs server, then our APIs server uploads the image to S3
Pros: More secure, as the S3 c… Continue reading Is it OK to pass credentials to the client to allow it to upload files to Amazon S3?
You no doubt heard about the Amazon S3 outage that happened earlier this week. It was reported far and wide by media outlets who normally don’t delve into details of the technology supporting our connected world. It is an interesting thing to think that most people have heard about The Cloud but never AWS and certainly not S3.
We didn’t report on the outage, but we ate up the details of the aftermath. It’s an excellent look under the hood. We say kudos to Amazon for adding to the growing trend of companies sharing the gory details surrounding events like …read more
Continue reading Amazon S3: Out Like a Light; On Like a Bathtub
The major internet outage across the United States earlier this week was not due to any virus or malware or state-sponsored cyber attack, rather it was the result of a simple TYPO.
Amazon on Thursday admitted that an incorrectly typed command during a… Continue reading How A Simple Command Typo Took Down Amazon S3 and Big Chunk of the Internet
The major internet outage across the United States earlier this week was not due to any virus or malware or state-sponsored cyber attack, rather it was the result of a simple TYPO.
Amazon on Thursday admitted that an incorrectly typed command during a… Continue reading How A Simple Command Typo Took Down Amazon S3 and Big Chunk of the Internet
By now you’ve probably heard that Amazon’s S3 storage service went down in its Northern Virginia datacenter for the better part of 4 hours yesterday, and took parts of a bunch of prominent websites and services with it. It’s worth noting that as of this morning, the Amazon dashboard was showing everything was operating normally. While yesterday’s outage was a big deal… Read More Continue reading The day Amazon S3 storage stood still
Consider a common scenario where I’m using an Amazon S3 bucket to store the files uploaded by my users and not in my actual server. So, all the files the user uploads, go to the s3 bucket, and doesn’t stay on my instance. Tha… Continue reading Does storing user files in S3 ensure that my server is secure from user uploaded malware?