home.social

#principleofleastprivilege — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #principleofleastprivilege, aggregated by home.social.

fetched live
  1. Seems at least one contributor of #seafile doesn't think #security is important: github.com/haiwen/seafile-admi

    TL;DR they do not provide the required S3 actions to use S3 as a storage back-end, and when asked for this, the contributor stated "I think it is better to grant a general write permission."

    This is an incredibly dangerous and short-sighted perspective.

    This is just asking for someone to turn your S3 bucket into #phishing infrastructure!

    #PrincipleOfLeastPrivilege