Top all-time · #12627
Daniel Grzelak
Personal blog · danielgrzelak.comsecurityprogramming
Daniel Grzelak's personal blog at danielgrzelak.com covers security and programming. Since 2016, 6 different Hacker News readers have linked it 6 times. No feed was found, so read it on the site itself.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Linked in an HN discussion of AWS account access tools and credential handling. The one comment discusses instance metadata credentials and their security tradeoffs, not the writing itself.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
danielgrzelak.com
What Hacker News says?
Instance metadata does provide rotating credentials, which is a step forward, but in every other way it's a net security loss : 1) All instance metadata, including IAM roles, are available to every user and every process on the instance for the life of the instance. 2) You cannot externally terminate access to credentials for the life of the instance (all instance metadata sticks around until the box is stopped or t…
Comment linking /backdooring-an-aws-account-da007d36f8f9
on “Holochrome – Log in or switch between your AWS accounts with a single key stroke”Submitted Backdooring an AWS account as a story · 16 points
HN discussionSubmitted Backdooring an AWS account as a story · 12 points
HN discussionSubmitted Backdooring an AWS account as a story · 4 points
HN discussionSubmitted Disrupting AWS logging as a story · 3 points
HN discussionSubmitted Backdooring an AWS account as a story · 2 points
HN discussion