AWS Identity and Access Management (IAM) best practice is to require all IAM and root users in your account to sign into the AWS Management Console with multi-factor authentication (MFA). When MFA is enabled, AWS prompts users for their username and password (the first factor – what they know) and also provides an authentication challenge […]
So get this - a phone #spying service provider, often used by parents or controlling spouses, has left its customer data on an unsecured #AWS bucket. So #security researchers could spy on the people who spy on their loved ones. 😐 Names, email addresses, #hashed #passwords and #unencrypted #selfies. This is a big breach. #infosec
A company that sells surveillance software to parents and employers left “terabytes of data” including photos, audio recordings, text messages and web history, exposed in a poorly-protected Amazon S3 bucket.
put the source away from #aws amazon sucks! no labour rights, no minimum wage et'all #wtf .... ♻ @csaurus csaurus favorited something by lambadalambda: I'm not against Mastodon! Some of my best friends are Mastodontists!