Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Has AWS Been Hacked?

news.ycombinator.com

Post reply on HN
Print view View original

11–20 of 23 posts

Re: Ask HN: Has AWS Been Hacked?

#11

Post by drzel »

vineyardmike wrote: post #8

Considering you're a developer of a game called "team fortress" (based on your HN comment history) who had a domain for team fortress with WHOIS info updated in 2021, I'd say that its probably someone on your dev team trying to make a few bucks and knew the address. But maybe you registered this with Cloudflare and forgot, and Cloudflare is forwarding the email to you.

I have all those things, but I used a very specific email address for AWS.

Basically, name+unique_identifier@domain.tld

The unique_identifier is unique to this AWS account.

Re: Ask HN: Has AWS Been Hacked?

#12

Post by simplyinfinity »

vineyardmike wrote: post #9
sam0x17 wrote: post #7

This is almost certainly leaking without you realizing it via a WHOIS contact email somewhere or another Another possibilty is that overseas contractors for AWS regularly harvest email addresses from the support UI and spam them. Wouldn't surprise me, but the first is more likely. Wouldn't really call this a hack though either way.

> Another possibilty is that overseas contractors for AWS regularly harvest email addresses from the support UI and spam them. If this was a practice that was possible and occurring then I suspect we'd have heard of many more cases by now. Most big companies don't use contractors for work that gives them access to customer data like that, and most don't just allow anyone easy access to raw customer data without a pap…

You would think.. But Epam is a contractor for one of the clouds and has access to client data. Another few (contractor/outsourcing ) companies i know of have access to all their customer's customer data.

Re: Ask HN: Has AWS Been Hacked?

#13

Post by Nextgrid »

vineyardmike wrote: post #9
sam0x17 wrote: post #7

This is almost certainly leaking without you realizing it via a WHOIS contact email somewhere or another Another possibilty is that overseas contractors for AWS regularly harvest email addresses from the support UI and spam them. Wouldn't surprise me, but the first is more likely. Wouldn't really call this a hack though either way.

> Another possibilty is that overseas contractors for AWS regularly harvest email addresses from the support UI and spam them. If this was a practice that was possible and occurring then I suspect we'd have heard of many more cases by now. Most big companies don't use contractors for work that gives them access to customer data like that, and most don't just allow anyone easy access to raw customer data without a pap…

> Most big companies don't use contractors for work that gives them access to customer data like that

[citation needed]

Okta is a recent counter-example.

Re: Ask HN: Has AWS Been Hacked?

#16

Post by izzygonzalez »

vineyardmike wrote: post #9
sam0x17 wrote: post #7

This is almost certainly leaking without you realizing it via a WHOIS contact email somewhere or another Another possibilty is that overseas contractors for AWS regularly harvest email addresses from the support UI and spam them. Wouldn't surprise me, but the first is more likely. Wouldn't really call this a hack though either way.

> Another possibilty is that overseas contractors for AWS regularly harvest email addresses from the support UI and spam them. If this was a practice that was possible and occurring then I suspect we'd have heard of many more cases by now. Most big companies don't use contractors for work that gives them access to customer data like that, and most don't just allow anyone easy access to raw customer data without a pap…

What big companies are you referring to? Protecting data takes effort, so by virtue of that, intent is a necessary precondition.

Most companies probably don't take care of these things at the rate or level you seem to be assuming that they do.

Re: Ask HN: Has AWS Been Hacked?

#18

Post by gregw2 »

AWS could be hacked... but the other logical options are your email provider was hacked... or some other PI/hacker who really cares about you (due to team fortress) has figured out your naming pattern from other sources and is probing you, either with or without that domain name company's help?

Re: Ask HN: Has AWS Been Hacked?

#19

Post by [deleted] »

vineyardmike wrote: post #9
sam0x17 wrote: post #7

This is almost certainly leaking without you realizing it via a WHOIS contact email somewhere or another Another possibilty is that overseas contractors for AWS regularly harvest email addresses from the support UI and spam them. Wouldn't surprise me, but the first is more likely. Wouldn't really call this a hack though either way.

> Another possibilty is that overseas contractors for AWS regularly harvest email addresses from the support UI and spam them. If this was a practice that was possible and occurring then I suspect we'd have heard of many more cases by now. Most big companies don't use contractors for work that gives them access to customer data like that, and most don't just allow anyone easy access to raw customer data without a pap…

[deleted]

Re: Ask HN: Has AWS Been Hacked?

#20

Post by nivertech »

drzel wrote: post #11
vineyardmike wrote: post #8

Considering you're a developer of a game called "team fortress" (based on your HN comment history) who had a domain for team fortress with WHOIS info updated in 2021, I'd say that its probably someone on your dev team trying to make a few bucks and knew the address. But maybe you registered this with Cloudflare and forgot, and Cloudflare is forwarding the email to you.

I have all those things, but I used a very specific email address for AWS. Basically, name+unique_identifier@domain.tld The unique_identifier is unique to this AWS account.

Maybe you have a catch-all enabled in your email client?
Post reply on HN