this post was submitted on 26 Apr 2025
64 points (100.0% liked)
Hacker News
1279 readers
353 users here now
Posts from the RSS Feed of HackerNews.
The feed sometimes contains ads and posts that have been removed by the mod team at HN.
founded 7 months ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Exposed S3 bucket? Yep, exposed S3 bucket.
How common is this?
Fairly common. Setting up proper permissions in AWS isn't always straightforward and getting permissions to properly integrate with an app can be confusing. I have worked with a lot of people who don't care about doing things right and only care about making something that works.
"I have worked with a lot of people who don't care about doing things right and only care about making something that works."
I'm not a coder, but I've encountered this at just about every job I've ever had.
Maybe, but if your not able or don't know you need to secure your S3 buckets, you shouldn't be managing infrastructure.
One could argue that storing anything in the cloud like that is pretty insecure to begin with. Since those screenshots likely contain private data, they really should be hosting their own solution.
Or, at the very least, providing end to end encryption for that data in the cloud.