Collaborate Disseminate
Context: There are many reasons for wanting a very trustworthy timestamp on a document, as discussed in many other questions here such as this one I wrote in 2010. E.g., in an election auditing context, one thing we’re interested in is a c… Continue reading How hard to hack are S3 Last-Modified timestamps?
After experiencing several regional outages late last year, Amazon has been adding replication technologies to several of their main storage technologies. Last month, Amazon added replication to their Elastic File System (Amazon EFS), and the company followed up this month by announcing Amazon Simple Storage Service (S3) Batch Replication. Batch Replication is a fully managed, […] Continue reading Amazon Adds Batch Replication to S3
So I have some data that isn’t overly sensitive, but I’m still on the fence on whether or not we should invest the additional time into managing it as a private resource, vs just publicly available.
The data (images & pdfs) are to be h… Continue reading Risks of web crawlers on public buckets
So I have some data that isn’t overly sensitive, but I’m still on the fence on whether or not we should invest the additional time into managing it as a private resource, vs just publicly available.
The data (images & pdfs) are to be h… Continue reading Risks of web crawlers on public buckets
I need to encrypt personal data like email, phone number, etc. I am using AWS KMS for managing the encryption keys. This is the system that is already implemented is as follows:
All the existing data is encrypted using a worker which firs… Continue reading How to manage Encryption Key for Server Side Encryption in AWS S3
While I was pentesting a web application, I found out that files that are uploaded to the web application are stored in an AWS S3 instance. Based on my experience, when a web application needs to store all types of files, including files w… Continue reading Amazon AWS S3 Unrestricted File Upload
I am writing a ReST service which enables user to get a tar archive of a set of requested documents. When the request succeeds, the service should upload the file to a pre-signed URL that points to an s3 bucket or azure blob storage or a p… Continue reading Server Upload to presigned URL
I would like to use an AWS S3 bucket to store my IoT firmware file and allows all of my IoT devices to access it to update the firmware to the latest version.
I want that the firmware file in the S3 bucket is secret to only me and my devic… Continue reading Does adding a randomized string in S3 file path has equal security to Google Drive shared link
So I have a S3 static website. Domain, DNS and proxy is managed via Cloudflare. Cloudflare is set to communicate with browsers using SSL and it in fact enforces SSL for non-SSL requests. However, traffic between CF and S3 is http only, as … Continue reading No SSL between Cloudflare and S3 static site. A big security issue?
Sorry for the naive question.
I wonder how DigitalOcean Spaces (S3 compatible) fits personal backups.
I found a lot of information about security of Amazon S3 and its security is undoubted, however, nothing about DigitalOcean.
On DigitalOc… Continue reading DigitalOcean Spaces for personal backups