Attackers Scrape GitHub For Cloud Service Credentials, Hijack Account To Mine Virtual Currency
Grazed from Forbes. Author: Runa A. Sandvik.
Rich Mogull, CEO at information security research and advisory firm Securosis, was working on a piece of code to accompany his presentation at the upcoming RSA Conference when he accidentally published the credentials for his AWS account-Amazon’s cloud computing service-online. A mistake that would later cost him $500.
In a blog post titled "My $500 Cloud Security Screwup", Mogull writes that he only learned about the issue when he received an email from Amazon’s AWS team one evening. The email said that both his access and secret key were publicly available on GitHub, a web-based hosting service for software development projects. In addition, the AWS team had reason to believe someone used the credentials to set up a number of unauthorized servers in the Amazon cloud…


For some people, the Supreme Court case involving the TV streaming service Aereo and the major broadcast networks could have major implications for cloud computing. But it won’t. I’ve received a lot of calls from reporters asking what the case means to the cloud. They associate the Aereo service to the cloud because Internet distribution is involved, and to many people the Internet, websites, and even email equal the cloud. Of course they do not.