offbyone , 2 months ago

@arstechnica as I understand it

• the $1300 was to cover rejected calls to the bucket. So not writes, but a quick "nope, this isn't yours"
• allowing writes to the bucket resulted in 10GB of other people's data in 30 seconds

Neither of these seems great.

And Amazon using Linkedin to make contact, when presumably AWS has his account details also and could use those, not a great look in my opinion.