5 ms·
How did Amazon detect your key in the wild? Or did they notice based on usage patterns/activity in your instances?
by billjive 13y ago
How did Amazon detect your key in the wild? Or did they notice based on usage patterns/activity in your instances?
- earless1 13y agoAll AWS keys I've seen start with 'AKIA'. I am assuming that they have bots that search Github and other search engines for access keys. At that point it is easy for them to tie them back to an account and notify the user.
- vertis 13y agoThey must only have started doing that recently. This project has been out in the wild for at least a year.
- enko 13y agoWell, kudos to them for doing that, at least. Of course it's awful that you could be out ~$3k, but imagine how bad it could have been if they hadn't been so proactive.
- vertis 13y agoYeah, it would have been another day at least before I checked amazon again.
- werner 13y agoLuke, drop me a note at werner [at] amazon with a link to the support ticket you created, and we'll see what we can do.
- sashagim 13y agoWow, talk about customer service!
- jayzalowitz 13y agohorray AWS!
- proksoup 13y agoHa - no --- they do that when they see a spike in charges. Or maybe it's just a coincidence they emailed immediately AFTER he racked up +3000$ in charges.
- vertis 13y agoEmail linked to my GitHub profile, so I would say by searching. But that's an assumption.
- proksoup 13y agoI bet you 20 bucks they searched for your key after they investigated the sudden spike in your charges :D