Thursday, December 18, 2008

[ Cloud Computing ] security issue at AWS

As Colin says, "The important bit first:"

"If you are making Query (aka REST) requests to Amazon SimpleDB, to Amazon
Elastic Compute Cloud (EC2), or to Amazon Simple Queue Service (SQS) over HTTP,
and there is any way for an attacker to provide you with data which you use to
construct your request, switch to HTTPS or start using AWS signature version 2
now."

AWS signature version 1 is insecure
http://www.daemonology.net/blog/2008-12-18-AWS-signature-version-1-is-insecure.html

Tim

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google
Groups "Cloud Computing" group.
To post to this group, send email to cloud-computing@googlegroups.com
To unsubscribe from this group, send email to
cloud-computing-unsubscribe@googlegroups.com
To post job listing, send email to jobs@cloudjobs.net (position title, employer and location in subject, description in message body) or visit http://www.cloudjobs.net
To submit your resume for cloud computing job bank, send it to resume@cloudjobs.net.
For more options, visit this group at
http://groups.google.ca/group/cloud-computing?hl=en?hl=en
Posting guidelines:
http://groups.google.ca/group/cloud-computing/web/frequently-asked-questions
This group posts are licensed under a Creative Commons Attribution-Share Alike 3.0 United States License http://creativecommons.org/licenses/by-sa/3.0/us/
Group Members Meet up Calendar - http://groups.google.ca/group/cloud-computing/web/meet-up-calendar
-~----------~----~----~----~------~----~------~--~---

No comments: