Collaborate Disseminate
If I am storing multiple customers’ data in cloud-based file storage such as an AWS S3 bucket, and I use an encryption service such as AWS KMS to achieve encryption at rest, does it add any extra security for me to store each customer’s da… Continue reading Is it more secure to encrypt separate customers’ data with separate keys?
I am developing a system for storage of medical records. A person could upload image(s) or file(s). Since it is a medical record , it needs to be stored in encrypted form.Also I want that the files or images could only be seen by authorise… Continue reading Encrypting file stores in s3
With no password required and no encryption in place, a burglar or ID thief could have seen your photos, your address and more. Continue reading Private photos leaked by PhotoSquared’s unsecured cloud storage
A web-mapping project came across detainees’ prescriptions and other PII that could be used by identity thieves to victimize prisoners. Continue reading Data about inmates and jail staff spilled by leaky prison app
A completely-avoidable data leak has exposed prescription records, mugshots, and other sensitive information related to an unknown number of prison inmates.
Continue reading Prison inmates’ sensitive data left exposed on leaky cloud bucket
Currently my web app stores user-uploaded ID scans in S3. I am concerned about an eventual data leak.
The S3 bucket is encrypted with server-side encryption (AES-256) but I figure the next obvious risk is an attacker gaining access to the… Continue reading Is it safe to store user-uploaded ID scans in S3 (with server encryption)?
You may have been expecting to reveal a lot by signing up as an adult webcam model, but I doubt this is quite what you had in mind.
Continue reading PussyCash adult webcam data breach exposes highly sensitive data of models
A PR and marketing provider exposed sensitive data for a raft of big-name companies. Continue reading GE, Dunkin’, Forever 21 Caught Up in Broad Internal Document Leak
A new AWS feature is supposed to help avoid accidental misconfigurations that could result in sensitive data being exposed, a company’s brand being damaged, and even – potentially – put its customers at risk.
Read more in my article o… Continue reading Amazon battles leaky S3 buckets with a new security tool
I have a question about accessing buckets on AWS S3. Let’s suppose we have a bucket that has to have public read access by everyone and only my API has to be able to PUT and DELETE items from bucket. To
restrict the access, take a look at… Continue reading Amazon S3 policies: CORS or Service Accounts?