Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
shakedown.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A community for live music fans with roots in the jam scene. Shakedown Social is run by a team of volunteers (led by @clifff and @sethadam1) and funded by donations.

Administered by:

Server stats:

247
active users

shakedown.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#s3

0 posts0 participants0 posts today
Public
Richi Jennings

21 million screenshots in one open bucket.

Workplace surveillance system #WorkComposer is under fire this week, for storing sensitive data with ZERO #security. The hapless firm saved more than 21 million screenshots from 200,000 users’ work PC screens—and popped them in an open #AmazonWebServices #S3 bucket.

Hackers could have easily stolen company secrets—and personal ones, too. In #SBBlogwatch, we can’t quite believe it.

@TheFuturumGroup @TechstrongGroup @SecurityBlvd: securityboulevard.com/2025/04/

Security Boulevard · 200,000 Workers’ PII at Risk in WorkComposer S3 SNAFUDon’t say ‘spyware’—21 million screenshots in one open bucket.
Public
Donald Hobern

The #data team I lead for the #Australian Plant Phenomics Network (plantphenomics.org/) is seeking two additional #Python #developers as part of our efforts to build end-to-end pipelines for #FAIR #research data.

One will focus on interfaces between our nodes and #S3 #repository storage at #Pawsey and #NCI.

The other will build tools to help nodes package complex data using RO-Crate.

The preferred location is Adelaide.

careers.adelaide.edu.au/cw/en/

careers.adelaide.edu.au/cw/en/

Please boost.

Australian Plant Phenomics NetworkHomeAPPN is Australia’s network of National Research Infrastructures for plant and agricultural science.
Public
Jake Coppinger

Thanks to @camwilson, @masek & Crikey for bringing the SMH/AFR subscriber S3 bucket breach into light and getting it fixed.

First announced at infosec.exchange/@bucketchalle

#crikey:
> Last year, Nine bragged about having first-party data including “demographic, content consumption and behavioural information” on 22 million users, and combining that with third party data, to create “rich, detailed, real-time profiles of audience members”.

#s3 #bucket #smh #afr #auspol

crikey.com.au/2025/03/27/sydne

Infosec Exchangebucketchallenge (@bucketchallenge@infosec.exchange)Tonight I found a #s3 #bucket from down under upside down and open. It spills a lot of jucy customer data including names, addresses and email IDs. The responsible disclosure was just sent to the company "owning" the data, but I guess this is the work of some sub contractor. I kindly asked for updates, otherwise I'll escalate that bucket to other agencies to make it go offline.
Public *
𝕂𝚞𝚋𝚒𝚔ℙ𝚒𝚡𝚎𝚕

Garage - An open-source distributed object storage service

Does any of you know about this and also use it professionally and if so in what context and how? Honestly, I'm standing up a little.

📦 garagehq.deuxfleurs.fr

GarageThe Garage team - An open-source distributed object storage service tailored for self-hostingAn open-source distributed object storage service tailored for self-hosting
#garage#rustlang#opensource
Public
Mitex Leo

Looking for a backup solution for my Fedora workstation. I want to store the files in a Backblaze B2 bucket. What do you guys recommend?

I'm tired of doing everything from scratch every time I reinstall the OS for some reason.

#Linux#S3#Backup
Replied in thread
Public
Kevin Karhan :verified:

@lispi314 @enigmatico @bunnybeam @kimapr
nodds in agreement

  • I think having a proper #API is a way to facilitate that, cuz worst-case one just slaps together some #aliases in #bash, #fish, #zsh or whatever #shell and just uses #curl to query stuff manually as this solves the whole #WebApp - issue.

And I do prefer #FLOSS as it works fine for an ever increasing audience!

  • Even if we choose to point at bad #UX / #UI combos like #GnuPG, we've to also acknowledge better existing alternatives like #enc that just work!

Personally, I think that everything people are expected to use if not forced to use should be #OpenSource as licensed in a #OSI accredited license and be released with #SourceCode and #documentation to make #reproduceableBuilds and thus facilitate #audits by truly independent parties...

  • And if that's not possible any requirement to using said things should be outlawed no matter the context!

A unsarcastically good example is #S3, even tho I hate #amazon, they wanted #developers to integrate their #ObjectStorage which necessitated an #open source'd API to the point that it's #backend is inherently reproduceable, and now every halfassing #Webhoster offers S3 #storage, sometimes with bit & second-precise billing.

GitHubGitHub - life4/enc: 🔑🔒 A modern and friendly CLI alternative to GnuPG: generate and download keys, encrypt, decrypt, and sign text and files, and more.🔑🔒 A modern and friendly CLI alternative to GnuPG: generate and download keys, encrypt, decrypt, and sign text and files, and more. - life4/enc
Replied in thread
Public
Kevin Karhan :verified:

@mrchrisadams Yeah, #S3-Style #ObjectStorage is nifty in many places.

  • It's kinda good that whilst #amazon is a bad company, they basically had to "#OpenSource" S3 as a #specification so anyone would even bother to implement it at all, and basically every #hoster nowadays offers that with bit & second-precise billing if wanted, as it's more convenient to #FTP and other #quota / #fixed storage...
#amazon#opensource#specification
Public
Matt Bacchi

Terraform just introduced S3 backend native state file locking, which replaces the old DynamoDB table required to lock your state files. Here's how to implement this new S3 native state file locking mechanism and what error messages look like if locking fails. bacchi.org/posts/terraform-s3- #aws #terraform #s3

bacchi.org · Switching to the Terraform S3 Backend with Native State File LocksTerraform is a flexible, cloud agnostic infrastructure as code (IaC) tool. As it constructs infrastructure resources, it builds a ledger used to track resources that have successfully been created as well as additional metadata (such as id.) Terraform stores this state in a binary formatted file with the extension .tfstate. What is the Terraform S3 Backend The Terraform state file described above by default is stored in the same directory as the Terraform infrastructure definition files you wrote.
ExploreLive feeds
About