[HN Gopher] AWS Superglue Vulnerability
       ___________________________________________________________________
        
       AWS Superglue Vulnerability
        
       Author : geerlingguy
       Score  : 22 points
       Date   : 2022-01-13 16:48 UTC (6 hours ago)
        
 (HTM) web link (orca.security)
 (TXT) w3m dump (orca.security)
        
       | mdaniel wrote:
       | There appears to be more discussion happening on the
       | CloudFormation side of this, even though some comments claim this
       | Glue vuln is actually worse:
       | https://news.ycombinator.com/item?id=29922522
        
       | yanirz wrote:
       | Check out this video for more technical details, and how we came
       | up to find this vulnerability:
       | https://www.linkedin.com/video/event/urn:li:ugcPost:68874259...
        
       | dixie_land wrote:
       | ex-AWS: to this day I don't know who originally green lit the
       | idea of a Service Linked Role where customers are forced to
       | accept and AWS developers just jam way more permissions that the
       | service actually needs because of laziness/incompetence
        
       ___________________________________________________________________
       (page generated 2022-01-13 23:02 UTC)