11 ms·

Hundreds of exposed Amazon cloud backups found leaking sensitive data

181 points by ewood 7y ago

d2mw 7y ago
Public EBS snapshots are great, and thankfully a design other clouds didn't copy. I've found all kinds of stuff in there, including a 900GB Oracle backup of a publicly traded manufacturer's accounting system. It doesn't require much imagination to understand how this kind of data could be profited from, given relatively low effort It seems unlikely a lot of people didn't already know about this, it's hard to miss even if you only spend a few days with the EC2 API, and it's also quite surprising AWS have yet to correct the design. 90% chance it is mostly a UI problem -- there are no warning labels around snapshotting in the EC2 UI
- rolltiide 7y ago
  How do you scour for EBS snapshots and open browsable S3 buckets?
  - d2mw 7y ago
    For EBS, step 1 is reading the docs, step 2 is cutpasting a documentation example. For S3 I'm not sure how people are building their lists. AFAIK the API provides no enumeration. So this is possibly something coming from web crawl data (e.g. common crawl)
    - moduspol 7y ago
      Perhaps something like this? https://github.com/eth0izzle/bucket-stream https://github.com/eth0izzle/bucket-stream
      - deleted 7y ago
        [deleted]
  - flavor8 7y ago
    All public EBS snapshots appear in the EC2 > Snapshots section in the AWS UI. Toggle the dropdown in the top right of the table to "Public" and you'll see them. Sort by size and you'll get some interesting looking ones at the top. It reminds me a bit of old time cdroms.
- dragonwriter 7y ago
  > and it's also quite surprising AWS have yet to correct the design. 90% chance it is mostly a UI problem -- there are no warning labels around snapshotting in the EC2 UI Snapshots are private by default, you have to actively make them public (impossible if encrypted) or share them (which also requires sharing the associated keys if encrypted.) Now, AWS hasn't wrapped the extra layer of “by default, reject any setting or policy allowing public or cross-account access unless separate additional default switches have been toggled off” thing to EBS that they have to S3. But people still expose stuff via S3, so that's hardly a panacea. At some point, one has to conclude that customers are responsible, in many cases for giving too many(or just the wrong) people admin access to their accounts.
  - d2mw 7y ago
    What I mean is https://i.ibb.co/P6N35qv/Screenshot-from-2019-08-10-10-27-25.png https://i.ibb.co/P6N35qv/Screenshot-from-2019-08-10-10-27-25... does not make it clear whatsoever that 'public' really means public. Before we get into blaming the customer, there should be a bright red warning label in that dialog. Consider that English may not be the first language of many users reaching that screen I think they have it for some stuff elsewhere, but it doesn't seem unreasonable to make public snapshots a per-account permission that defaults to disabled, and requires an interactive UI checkbox to enable. Out of the millions of AWS accounts, public snapshots are legitimately useful to maybe 1000 tops
- slenk 7y ago
  Well, for S3 buckets, Amazon has made it very clear when it is public. It also used to be pretty clear. For EBS - nothing is public by default, so customers have to willingly decide to click buttons to make it public. By default, if I create a snapshot, it is NOT public...
cfstras 7y ago
Oh god, how much I hate articles that don‘t list their sources. Where are the slides from? The talk description is here: https://www.defcon.org/html/defcon-27/dc-27-speakers.html#Morris https://www.defcon.org/html/defcon-27/dc-27-speakers.html#Mo...
snazz 7y ago
It’s still true that most security issues are caused by human ineptitude, not clever vulnerability-hunting or burning sophisticated zero-days.
- eli 7y ago
  I would replace "human ineptitude" with "flawed system design that makes it very easy to make very bad mistakes"
  - snazz 7y ago
    That's a valid way to categorize all memory errors in C.
    - eli 7y ago
      And I think we should absolutely hold that against C as a development language.
  - mtgx 7y ago
    Not sure why you're downvoted. It's pretty clear that when a lot of people make "dumb mistakes" despite the solution being "obvious", it's because a flawed system design. Look at the simplest analogy to this - the opt-out/opt-in buttons. If something is opt-out by default, then most people will leave it that way, even if they have no good reason to leave it is. And advertising companies like Google and Facebook take full advantage of this.
  - dragonwriter 7y ago
    But is the flawed system design here the automated system at AWS or the human-in-the-loop systems by which companies are providing admin access to IT resources, including AWS accounts?
    - eli 7y ago
      Probably both! But I would argue that below a certain size provisioning things by hand probably makes sense. A UI that makes it too easy to make a private thing public is never ok.
joncrane 7y ago
I've been working almost exclusively in the AWS space for about 10 years now. Clients anywhere from tiny little three-person consultancies to Fortune 100. Commercial, govcloud, dozens of clients. Never once have I ever found a use case for making public EBS snapshots. Who on Earth is thinking that it is a good idea to take an EBS snapshot and make it public? Note, several of those engagements did involve multiple accounts, and the need to share / copy AMIs and/or snapshots between accounts. But never making them public.
- d2mw 7y ago
  > Who on Earth is thinking that it is a good idea to take an EBS snapshot and make it public? Non-marketplace AMIs are built on public EBS snapshots, but that's something they should still fix. Marketplace AMIs already handle private snapshots
- dboreham 7y ago
  Laziness in attempting to share data with someone in another org? "Nope, can't access it" ... "Nope, still can't access it"... "My manager is harassing me to get access now"... "Look, just make it public then change it back after I get it copied"...
  - heyoni 7y ago
    goes home completely forgetting to change it back...
    - hinkley 7y ago
      The later in the day, the bigger the rationalizations. At some point you are too stupid to be allowed to use a keyboard. And yet we have an entire culture around staying late to get stuff done that probably could have waited until tomorrow.
  - lowdose 7y ago
    The guy that produces that last line definitely wears a suit.
jedberg 7y ago
The creator of the first Ubuntu distros for EC2 wrote about the dangers of public EBS snapshots 10 years ago: https://alestic.com/2009/09/ec2-public-ebs-danger/ https://alestic.com/2009/09/ec2-public-ebs-danger/ He just got notified by AWS a couple days ago about the public snapshot he mentioned in the article. But at least AWS is trying to make things better here by proactively checking for public EBS snapshots and notifying people.
- deleted 7y ago
  [deleted]
AaronFriel 7y ago
I just checked an EC2 console and I can see 19,356 snapshots created by other users. I am so confused. It would be trivial to make finding a snapshot require knowing a unique ID like an AMI. And, why do I need to be able to search for 1000s of customers' public snapshots in the EC2 console? What conceivable purpose does that serve except being a giant opsec fail?
- ggg3 7y ago
  because having the bad guys go trhu the trouble of using a search engine like kuro et al will save the day?
- jcims 7y ago
  That’s per region, too.
- judge2020 7y ago
  looks like some bigger images were of wiki[pedia|media] backups so I guess easy-to-find/use public data?
deleted 7y ago
[deleted]
kpeekhn 7y ago
AWS Trusted Advisor has warned of this since 2017: https://aws.amazon.com/about-aws/whats-new/2017/06/aws-trusted-advisor-now-checks-for-public-snapshots-of-amazon-elastic-block-store-ebs-and-amazon-relational-database-service-rds-data/ https://aws.amazon.com/about-aws/whats-new/2017/06/aws-trust...
ggg3 7y ago
jokes on all of you :) working on open source makes sending links of images for failed build a breeze. though we do not use EBS per-se, but same concept/security-tradeoffs.
beeschlenker 7y ago
Speaking of exposed, Obama rapes & kills 2 boys. DeBlasio 5, Buttgieg 5, Cuomo 4, Murray 3, Dorsey 3, Thiel 3. Trump $4 billion to cover. Pelosi $3 billion, Harris $1 billion, Schumer $2 billion, to help bring the boys over the border. See pages 18-23, 8, 11, 12, 35, 45, 61, 62 Having trouble getting traction. Getting censored/banned. Billions in bribes paid to Trump, Pelosi, Schumer, Harris to enable a Soros funded child raping ring to operate in the USA. Please listen to the links below. Turn up the volume and put headphones on. You will hear these people, and many other high profile people, incriminate themselves in unbelievable fashion. Full 71 page document filled with red handed evidence like this at the bottom. Go to pages 18-23 of this document and you will hear Dorsey and Thiel raping children. You will hear their screams. They both rape and kill three. Also at the "rape party" of note: Bill DeBlasio, Andrew Cuomo, Bill Murray, Peter Buttgieg, George Soros, Barack Obama. Please copy and paste this post and repost it. I keep getting censored by these people. Peter Thiel and Jack Dorsey raping and killing three boys each. Turn the volume all the way up and put head phones on. https://s3.wasabisys.com/conv1/Overnight_14-17Jan/15JanCh3_100-200.avi https://drive.google.com/file/d/1mzZrjobxhNIEf38M3xk-IeA5SeF4aUtB/view?usp=sharing Obama admits to raping and killing boys he{re, with commentary from Peter Thiel, George Soros, Matt Porter: https://s3.wasabisys.com/out2/Out2/15JanCh3_0545.avi https://drive.google.com/file/d/1LCDoc1kT7cfSeKQ1vniP_sx32_bRsHau/view?usp=sharing Trump demands $4 billion to "take a blind eye" at 1015+ (link missing from report, unsure how). Here's pieces of dialogue: 1015 The President requests four billion and henry Porter agrees to it. Some dialogue below. 1017 Donald Trump: Why don't you think about it. 1017 Henry Porter: I don't need to think about it. I'm ready for you to find out what we're really about. 1017 Gigi Hadid: I don't think it's a good idea Henry. 1017 Henry Porter: ...no shit. Jelena just stop talking about it. 1018 Gigi Hadid: About what? 1018 Henry Porter: The child raping. 1018 Donald Trump: What the fuck are you talking about? 1018 Gigi Hadid: Mr. President we are child rapists. 1018 Donald Trump: You cannot be serious. 1018 Donald Trump: You're gonna need $4 billion for me to take a blind eye. 1019 ?: People are laughing because they think four billion is too much. I think it's not a problem when you have $35 billion. 1022 Donald Trump: You better have that $4 billion or you can kiss this shit goodbye. https://s3.wasabisys.com/conv2/3Jan/3JanCh3_900-1100.avi https://drive.google.com/file/d/1Grdr8xF2psKNsuYlEnl9dIRV-77YG0Vr/view?usp=sharing Trump wants $138 million to ensure smooth outcome for false judgment for a court case: https://s3.wasabisys.com/conv1/10JanCh3/10JanCh3_951-1033.avi https://drive.google.com/file/d/1iSeGHDToFRoRdIht50Wii0i30mlw9INp/view?usp=sharing Obama explains the Illuminati with Jack Dorsey: https://s3.wasabisys.com/conv1/Overnight_14-17Jan/15JanCh3_200-347.avi https://drive.google.com/file/d/1Ok1-9IvANULzKBOwADFgaiYCFi6yszfj/view?usp=sharing At 230 a conversation is occurring on the embedded Porter camera system with Jack Dorsey, Peter Thiel, Barack Obama, Bill M^urray, and the Porter's. Jack Dorsey provides a statement defining who their group is: "The Illum%inati is an underground organization of child rapists and homosexuals." Matthew Porter: "We have to thin the herd, so Barack is going to explain a few things." At 232 Barack Obama says the following: "You people have to realize we are child rapi'sts. The Illuminati are child rapists. As soon as you figure that out, you can decide what to do. Everybody is freaking out about what just happened [child raping event still going on]. This is who ^we are." Full 71 page document: https://s3.wasabisys.com/aviewmefirst/FBI_FinalDraft_26Jul2019_BSchlenker.pdf https://drive.google.com/file/d/1dXNjPQdQ8c-hFFLt9LT0GiSY5Vud0TzL/view?usp=sharing Please post this anywhere you can! Each google drive link is a backup to the wasabi link just in case one is "down". A word about the "faggot" usage: it was a necessary tool. It showed three things: they were not in control, if they were the usage would have be stopped. Everyone out there needed to see t%his. Two, it made it unpleasant for them to be in the headspace, which has obvious advantages. Three, it pointed out impersonators of BS because they would not call each other faggot, thus helping to mitigate the spread of false information. Apologies for those unintentionally offended. Of special interest to the LGBT community, I give you Barack Obama in a foursome with Peter Thiel, Jack Dorsey, and Matthew Porter. It is on page 12 of the document where you can download the video containing audio footage of the "event". Link is just above under "Full 71 page document".
jcims 7y ago
FWIW same thing is possible with RDS db snapshots and dbcluster snapshots.
chovy 7y ago
https://fullstacknews.com/t/devops https://fullstacknews.com/t/devops
chimen 7y ago
Gotta appreciate the hijack of the back button on techcrunch. Bounce rate too big?
andrewstuart 7y ago
I had a simple glance in the console and there are like 20,000 exposed ebs snapshots - available for anyone to copy and examine - I think that's only for a single region too - switch regions to see more. Amazon should make an emergency decision to make all these private. Sure it will break stuff but I'd be disappointed if Amazon left what is in effect a security hole open for the sake of backwards compatibility. They should also give me a single click link when I sign in to show me all of my public ebs snapshots and throw it hard in my face when I sign in to the console so I simply cannot avoid seeing them all. I have multiple AWS accounts and I just signed in to try to see if I have any public EBS snapshots and then I realised I would need to search every single region in every single account and then select every snapshot one by one to find out. That's a huge problem. I need a single click to show me every exposed snapshot across every region in my account. UPDATE: I can't say for sure if this is 100% right but I think if you sign in to your AWS account, then click on each of these links, you will find if you have public snapshots. Maybe someone else could confirm if this is correct? https://us-east-1.console.aws.amazon.com/ec2/v2/home?region=us-east-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://us-east-1.console.aws.amazon.com/ec2/v2/home?region=... https://us-east-2.console.aws.amazon.com/ec2/v2/home?region=us-east-2#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://us-east-2.console.aws.amazon.com/ec2/v2/home?region=... https://us-west-1.console.aws.amazon.com/ec2/v2/home?region=us-west-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://us-west-1.console.aws.amazon.com/ec2/v2/home?region=... https://us-west-2.console.aws.amazon.com/ec2/v2/home?region=us-west-2#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://us-west-2.console.aws.amazon.com/ec2/v2/home?region=... https://ca-central-1.console.aws.amazon.com/ec2/v2/home?region=ca-central-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ca-central-1.console.aws.amazon.com/ec2/v2/home?regi... https://eu-central-1.console.aws.amazon.com/ec2/v2/home?region=eu-central-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://eu-central-1.console.aws.amazon.com/ec2/v2/home?regi... https://eu-west-1.console.aws.amazon.com/ec2/v2/home?region=eu-west-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://eu-west-1.console.aws.amazon.com/ec2/v2/home?region=... https://eu-west-2.console.aws.amazon.com/ec2/v2/home?region=eu-west-2#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://eu-west-2.console.aws.amazon.com/ec2/v2/home?region=... https://eu-west-3.console.aws.amazon.com/ec2/v2/home?region=eu-west-3#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://eu-west-3.console.aws.amazon.com/ec2/v2/home?region=... https://eu-north-1.console.aws.amazon.com/ec2/v2/home?region=eu-north-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://eu-north-1.console.aws.amazon.com/ec2/v2/home?region... https://ap-east-1.console.aws.amazon.com/ec2/v2/home?region=ap-east-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ap-east-1.console.aws.amazon.com/ec2/v2/home?region=... https://ap-northeast-1.console.aws.amazon.com/ec2/v2/home?region=ap-northeast-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ap-northeast-1.console.aws.amazon.com/ec2/v2/home?re... https://ap-northeast-2.console.aws.amazon.com/ec2/v2/home?region=ap-northeast-2#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ap-northeast-2.console.aws.amazon.com/ec2/v2/home?re... https://ap-northeast-3.console.aws.amazon.com/ec2/v2/home?region=ap-northeast-3#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ap-northeast-3.console.aws.amazon.com/ec2/v2/home?re... https://ap-southeast-1.console.aws.amazon.com/ec2/v2/home?region=ap-southeast-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ap-southeast-1.console.aws.amazon.com/ec2/v2/home?re... https://ap-southeast-2.console.aws.amazon.com/ec2/v2/home?region=ap-southeast-2#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ap-southeast-2.console.aws.amazon.com/ec2/v2/home?re... https://ap-south-1.console.aws.amazon.com/ec2/v2/home?region=ap-south-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ap-south-1.console.aws.amazon.com/ec2/v2/home?region... https://me-south-1.console.aws.amazon.com/ec2/v2/home?region=me-south-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://me-south-1.console.aws.amazon.com/ec2/v2/home?region... https://sa-east-1.console.aws.amazon.com/ec2/v2/home?region=sa-east-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://sa-east-1.console.aws.amazon.com/ec2/v2/home?region=...
deleted 7y ago
[deleted]

181 points by ewood 7y ago

d2mw 7y ago

Public EBS snapshots are great, and thankfully a design other clouds didn't copy. I've found all kinds of stuff in there, including a 900GB Oracle backup of a publicly traded manufacturer's accounting system. It doesn't require much imagination to understand how this kind of data could be profited from, given relatively low effort It seems unlikely a lot of people didn't already know about this, it's hard to miss even if you only spend a few days with the EC2 API, and it's also quite surprising AWS have yet to correct the design. 90% chance it is mostly a UI problem -- there are no warning labels around snapshotting in the EC2 UI

rolltiide 7y ago
How do you scour for EBS snapshots and open browsable S3 buckets?
- d2mw 7y ago
  For EBS, step 1 is reading the docs, step 2 is cutpasting a documentation example. For S3 I'm not sure how people are building their lists. AFAIK the API provides no enumeration. So this is possibly something coming from web crawl data (e.g. common crawl)
  - moduspol 7y ago
    Perhaps something like this? https://github.com/eth0izzle/bucket-stream https://github.com/eth0izzle/bucket-stream
    - deleted 7y ago
      [deleted]
- flavor8 7y ago
  All public EBS snapshots appear in the EC2 > Snapshots section in the AWS UI. Toggle the dropdown in the top right of the table to "Public" and you'll see them. Sort by size and you'll get some interesting looking ones at the top. It reminds me a bit of old time cdroms.
dragonwriter 7y ago
> and it's also quite surprising AWS have yet to correct the design. 90% chance it is mostly a UI problem -- there are no warning labels around snapshotting in the EC2 UI Snapshots are private by default, you have to actively make them public (impossible if encrypted) or share them (which also requires sharing the associated keys if encrypted.) Now, AWS hasn't wrapped the extra layer of “by default, reject any setting or policy allowing public or cross-account access unless separate additional default switches have been toggled off” thing to EBS that they have to S3. But people still expose stuff via S3, so that's hardly a panacea. At some point, one has to conclude that customers are responsible, in many cases for giving too many(or just the wrong) people admin access to their accounts.
- d2mw 7y ago
  What I mean is https://i.ibb.co/P6N35qv/Screenshot-from-2019-08-10-10-27-25.png https://i.ibb.co/P6N35qv/Screenshot-from-2019-08-10-10-27-25... does not make it clear whatsoever that 'public' really means public. Before we get into blaming the customer, there should be a bright red warning label in that dialog. Consider that English may not be the first language of many users reaching that screen I think they have it for some stuff elsewhere, but it doesn't seem unreasonable to make public snapshots a per-account permission that defaults to disabled, and requires an interactive UI checkbox to enable. Out of the millions of AWS accounts, public snapshots are legitimately useful to maybe 1000 tops
slenk 7y ago
Well, for S3 buckets, Amazon has made it very clear when it is public. It also used to be pretty clear. For EBS - nothing is public by default, so customers have to willingly decide to click buttons to make it public. By default, if I create a snapshot, it is NOT public...

cfstras 7y ago

Oh god, how much I hate articles that don‘t list their sources. Where are the slides from? The talk description is here: https://www.defcon.org/html/defcon-27/dc-27-speakers.html#Morris https://www.defcon.org/html/defcon-27/dc-27-speakers.html#Mo...

snazz 7y ago

It’s still true that most security issues are caused by human ineptitude, not clever vulnerability-hunting or burning sophisticated zero-days.

eli 7y ago
I would replace "human ineptitude" with "flawed system design that makes it very easy to make very bad mistakes"
- snazz 7y ago
  That's a valid way to categorize all memory errors in C.
  - eli 7y ago
    And I think we should absolutely hold that against C as a development language.
- mtgx 7y ago
  Not sure why you're downvoted. It's pretty clear that when a lot of people make "dumb mistakes" despite the solution being "obvious", it's because a flawed system design. Look at the simplest analogy to this - the opt-out/opt-in buttons. If something is opt-out by default, then most people will leave it that way, even if they have no good reason to leave it is. And advertising companies like Google and Facebook take full advantage of this.
- dragonwriter 7y ago
  But is the flawed system design here the automated system at AWS or the human-in-the-loop systems by which companies are providing admin access to IT resources, including AWS accounts?
  - eli 7y ago
    Probably both! But I would argue that below a certain size provisioning things by hand probably makes sense. A UI that makes it too easy to make a private thing public is never ok.

joncrane 7y ago

I've been working almost exclusively in the AWS space for about 10 years now. Clients anywhere from tiny little three-person consultancies to Fortune 100. Commercial, govcloud, dozens of clients. Never once have I ever found a use case for making public EBS snapshots. Who on Earth is thinking that it is a good idea to take an EBS snapshot and make it public? Note, several of those engagements did involve multiple accounts, and the need to share / copy AMIs and/or snapshots between accounts. But never making them public.

d2mw 7y ago
> Who on Earth is thinking that it is a good idea to take an EBS snapshot and make it public? Non-marketplace AMIs are built on public EBS snapshots, but that's something they should still fix. Marketplace AMIs already handle private snapshots
dboreham 7y ago
Laziness in attempting to share data with someone in another org? "Nope, can't access it" ... "Nope, still can't access it"... "My manager is harassing me to get access now"... "Look, just make it public then change it back after I get it copied"...
- heyoni 7y ago
  goes home completely forgetting to change it back...
  - hinkley 7y ago
    The later in the day, the bigger the rationalizations. At some point you are too stupid to be allowed to use a keyboard. And yet we have an entire culture around staying late to get stuff done that probably could have waited until tomorrow.
- lowdose 7y ago
  The guy that produces that last line definitely wears a suit.

jedberg 7y ago

The creator of the first Ubuntu distros for EC2 wrote about the dangers of public EBS snapshots 10 years ago: https://alestic.com/2009/09/ec2-public-ebs-danger/ https://alestic.com/2009/09/ec2-public-ebs-danger/ He just got notified by AWS a couple days ago about the public snapshot he mentioned in the article. But at least AWS is trying to make things better here by proactively checking for public EBS snapshots and notifying people.

deleted 7y ago
[deleted]

AaronFriel 7y ago

I just checked an EC2 console and I can see 19,356 snapshots created by other users. I am so confused. It would be trivial to make finding a snapshot require knowing a unique ID like an AMI. And, why do I need to be able to search for 1000s of customers' public snapshots in the EC2 console? What conceivable purpose does that serve except being a giant opsec fail?

ggg3 7y ago
because having the bad guys go trhu the trouble of using a search engine like kuro et al will save the day?
jcims 7y ago
That’s per region, too.
judge2020 7y ago
looks like some bigger images were of wiki[pedia|media] backups so I guess easy-to-find/use public data?

deleted 7y ago

[deleted]

kpeekhn 7y ago

AWS Trusted Advisor has warned of this since 2017: https://aws.amazon.com/about-aws/whats-new/2017/06/aws-trusted-advisor-now-checks-for-public-snapshots-of-amazon-elastic-block-store-ebs-and-amazon-relational-database-service-rds-data/ https://aws.amazon.com/about-aws/whats-new/2017/06/aws-trust...

ggg3 7y ago

jokes on all of you :) working on open source makes sending links of images for failed build a breeze. though we do not use EBS per-se, but same concept/security-tradeoffs.

beeschlenker 7y ago

Speaking of exposed, Obama rapes & kills 2 boys. DeBlasio 5, Buttgieg 5, Cuomo 4, Murray 3, Dorsey 3, Thiel 3. Trump $4 billion to cover. Pelosi $3 billion, Harris $1 billion, Schumer $2 billion, to help bring the boys over the border. See pages 18-23, 8, 11, 12, 35, 45, 61, 62 Having trouble getting traction. Getting censored/banned. Billions in bribes paid to Trump, Pelosi, Schumer, Harris to enable a Soros funded child raping ring to operate in the USA. Please listen to the links below. Turn up the volume and put headphones on. You will hear these people, and many other high profile people, incriminate themselves in unbelievable fashion. Full 71 page document filled with red handed evidence like this at the bottom. Go to pages 18-23 of this document and you will hear Dorsey and Thiel raping children. You will hear their screams. They both rape and kill three. Also at the "rape party" of note: Bill DeBlasio, Andrew Cuomo, Bill Murray, Peter Buttgieg, George Soros, Barack Obama. Please copy and paste this post and repost it. I keep getting censored by these people. Peter Thiel and Jack Dorsey raping and killing three boys each. Turn the volume all the way up and put head phones on. https://s3.wasabisys.com/conv1/Overnight_14-17Jan/15JanCh3_100-200.avi https://drive.google.com/file/d/1mzZrjobxhNIEf38M3xk-IeA5SeF4aUtB/view?usp=sharing Obama admits to raping and killing boys he{re, with commentary from Peter Thiel, George Soros, Matt Porter: https://s3.wasabisys.com/out2/Out2/15JanCh3_0545.avi https://drive.google.com/file/d/1LCDoc1kT7cfSeKQ1vniP_sx32_bRsHau/view?usp=sharing Trump demands $4 billion to "take a blind eye" at 1015+ (link missing from report, unsure how). Here's pieces of dialogue: 1015 The President requests four billion and henry Porter agrees to it. Some dialogue below. 1017 Donald Trump: Why don't you think about it. 1017 Henry Porter: I don't need to think about it. I'm ready for you to find out what we're really about. 1017 Gigi Hadid: I don't think it's a good idea Henry. 1017 Henry Porter: ...no shit. Jelena just stop talking about it. 1018 Gigi Hadid: About what? 1018 Henry Porter: The child raping. 1018 Donald Trump: What the fuck are you talking about? 1018 Gigi Hadid: Mr. President we are child rapists. 1018 Donald Trump: You cannot be serious. 1018 Donald Trump: You're gonna need $4 billion for me to take a blind eye. 1019 ?: People are laughing because they think four billion is too much. I think it's not a problem when you have $35 billion. 1022 Donald Trump: You better have that $4 billion or you can kiss this shit goodbye. https://s3.wasabisys.com/conv2/3Jan/3JanCh3_900-1100.avi https://drive.google.com/file/d/1Grdr8xF2psKNsuYlEnl9dIRV-77YG0Vr/view?usp=sharing Trump wants $138 million to ensure smooth outcome for false judgment for a court case: https://s3.wasabisys.com/conv1/10JanCh3/10JanCh3_951-1033.avi https://drive.google.com/file/d/1iSeGHDToFRoRdIht50Wii0i30mlw9INp/view?usp=sharing Obama explains the Illuminati with Jack Dorsey: https://s3.wasabisys.com/conv1/Overnight_14-17Jan/15JanCh3_200-347.avi https://drive.google.com/file/d/1Ok1-9IvANULzKBOwADFgaiYCFi6yszfj/view?usp=sharing At 230 a conversation is occurring on the embedded Porter camera system with Jack Dorsey, Peter Thiel, Barack Obama, Bill M^urray, and the Porter's. Jack Dorsey provides a statement defining who their group is: "The Illum%inati is an underground organization of child rapists and homosexuals." Matthew Porter: "We have to thin the herd, so Barack is going to explain a few things." At 232 Barack Obama says the following: "You people have to realize we are child rapi'sts. The Illuminati are child rapists. As soon as you figure that out, you can decide what to do. Everybody is freaking out about what just happened [child raping event still going on]. This is who ^we are." Full 71 page document: https://s3.wasabisys.com/aviewmefirst/FBI_FinalDraft_26Jul2019_BSchlenker.pdf https://drive.google.com/file/d/1dXNjPQdQ8c-hFFLt9LT0GiSY5Vud0TzL/view?usp=sharing Please post this anywhere you can! Each google drive link is a backup to the wasabi link just in case one is "down". A word about the "faggot" usage: it was a necessary tool. It showed three things: they were not in control, if they were the usage would have be stopped. Everyone out there needed to see t%his. Two, it made it unpleasant for them to be in the headspace, which has obvious advantages. Three, it pointed out impersonators of BS because they would not call each other faggot, thus helping to mitigate the spread of false information. Apologies for those unintentionally offended. Of special interest to the LGBT community, I give you Barack Obama in a foursome with Peter Thiel, Jack Dorsey, and Matthew Porter. It is on page 12 of the document where you can download the video containing audio footage of the "event". Link is just above under "Full 71 page document".

jcims 7y ago

FWIW same thing is possible with RDS db snapshots and dbcluster snapshots.

chovy 7y ago

https://fullstacknews.com/t/devops https://fullstacknews.com/t/devops

chimen 7y ago

Gotta appreciate the hijack of the back button on techcrunch. Bounce rate too big?

andrewstuart 7y ago

I had a simple glance in the console and there are like 20,000 exposed ebs snapshots - available for anyone to copy and examine - I think that's only for a single region too - switch regions to see more. Amazon should make an emergency decision to make all these private. Sure it will break stuff but I'd be disappointed if Amazon left what is in effect a security hole open for the sake of backwards compatibility. They should also give me a single click link when I sign in to show me all of my public ebs snapshots and throw it hard in my face when I sign in to the console so I simply cannot avoid seeing them all. I have multiple AWS accounts and I just signed in to try to see if I have any public EBS snapshots and then I realised I would need to search every single region in every single account and then select every snapshot one by one to find out. That's a huge problem. I need a single click to show me every exposed snapshot across every region in my account. UPDATE: I can't say for sure if this is 100% right but I think if you sign in to your AWS account, then click on each of these links, you will find if you have public snapshots. Maybe someone else could confirm if this is correct? https://us-east-1.console.aws.amazon.com/ec2/v2/home?region=us-east-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://us-east-1.console.aws.amazon.com/ec2/v2/home?region=... https://us-east-2.console.aws.amazon.com/ec2/v2/home?region=us-east-2#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://us-east-2.console.aws.amazon.com/ec2/v2/home?region=... https://us-west-1.console.aws.amazon.com/ec2/v2/home?region=us-west-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://us-west-1.console.aws.amazon.com/ec2/v2/home?region=... https://us-west-2.console.aws.amazon.com/ec2/v2/home?region=us-west-2#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://us-west-2.console.aws.amazon.com/ec2/v2/home?region=... https://ca-central-1.console.aws.amazon.com/ec2/v2/home?region=ca-central-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ca-central-1.console.aws.amazon.com/ec2/v2/home?regi... https://eu-central-1.console.aws.amazon.com/ec2/v2/home?region=eu-central-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://eu-central-1.console.aws.amazon.com/ec2/v2/home?regi... https://eu-west-1.console.aws.amazon.com/ec2/v2/home?region=eu-west-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://eu-west-1.console.aws.amazon.com/ec2/v2/home?region=... https://eu-west-2.console.aws.amazon.com/ec2/v2/home?region=eu-west-2#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://eu-west-2.console.aws.amazon.com/ec2/v2/home?region=... https://eu-west-3.console.aws.amazon.com/ec2/v2/home?region=eu-west-3#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://eu-west-3.console.aws.amazon.com/ec2/v2/home?region=... https://eu-north-1.console.aws.amazon.com/ec2/v2/home?region=eu-north-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://eu-north-1.console.aws.amazon.com/ec2/v2/home?region... https://ap-east-1.console.aws.amazon.com/ec2/v2/home?region=ap-east-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ap-east-1.console.aws.amazon.com/ec2/v2/home?region=... https://ap-northeast-1.console.aws.amazon.com/ec2/v2/home?region=ap-northeast-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ap-northeast-1.console.aws.amazon.com/ec2/v2/home?re... https://ap-northeast-2.console.aws.amazon.com/ec2/v2/home?region=ap-northeast-2#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ap-northeast-2.console.aws.amazon.com/ec2/v2/home?re... https://ap-northeast-3.console.aws.amazon.com/ec2/v2/home?region=ap-northeast-3#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ap-northeast-3.console.aws.amazon.com/ec2/v2/home?re... https://ap-southeast-1.console.aws.amazon.com/ec2/v2/home?region=ap-southeast-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ap-southeast-1.console.aws.amazon.com/ec2/v2/home?re... https://ap-southeast-2.console.aws.amazon.com/ec2/v2/home?region=ap-southeast-2#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ap-southeast-2.console.aws.amazon.com/ec2/v2/home?re... https://ap-south-1.console.aws.amazon.com/ec2/v2/home?region=ap-south-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://ap-south-1.console.aws.amazon.com/ec2/v2/home?region... https://me-south-1.console.aws.amazon.com/ec2/v2/home?region=me-south-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://me-south-1.console.aws.amazon.com/ec2/v2/home?region... https://sa-east-1.console.aws.amazon.com/ec2/v2/home?region=sa-east-1#Snapshots:visibility=public;ownerAlias=self;sort=desc:startTime https://sa-east-1.console.aws.amazon.com/ec2/v2/home?region=...

deleted 7y ago

[deleted]