undefined | Better HN

0 pointsmschuster9111y ago0 comments

And tokens can be abused or stolen (given they're not stored or paired with other tokens/keys residing inside a TPM), we have seen numerous cases of people hijacking others' AWS accounts and using them for mining bitcoin, of all things.

0 comments

2 comments · 1 top-level

nailer11y ago· 1 in thread

That's done with an AWS secret key, which is effectively your password to the AWS API, and not a limited use token.

mschuster91OP11y ago

I know that, still people have managed to commit their passwords, ssh keys and more to github.

j / k navigate · click thread line to collapse