https://insinuator.net/tags/s3/ Recent content in S3 on Insinuator.net - Bold Statements Hugo en-us Fri, 05 Apr 2013 00:00:00 +0000 https://insinuator.net/2013/04/thoughts-on-cloud-governance-part-1/ Fri, 05 Apr 2013 00:00:00 +0000 https://insinuator.net/2013/04/thoughts-on-cloud-governance-part-1/ <p>Last week Rapid7 <a href="https://community.rapid7.com/community/infosec/blog/2013/03/27/1951-open-s3-buckets">posted</a> an interesting analysis of the Amazon S3 storage system: Apparently roughly one out of six S3 buckets (a bucket is, simply said, a kind of folder) is accessible without any authentication mechanism. Accessing those files, the <a href="http://www.rapid7.com/">Rapid7</a> guys were able to download a <a href="http://www.google.com/search?q=site%3As3.amazonaws.com+filetype%3Axls+password&amp;btnG=Search&amp;client=opera&amp;oe=utf-8&amp;channel=suggest&amp;gbv=1">wide range of data</a>, also comprising confidential information such as source code or employee information, comparable to past research for <a href="http://blog.rootshell.be/2012/05/19/what-are-you-sharing-with-dropbox/">other platforms</a> (see also this presentation I gave on some of the <a href="https://www.ernw.de/download/ERNW_BastaSpring13_CloudFails.pdf">biggest Cloud #Fails</a>)</p>