Thursday, July 23, 2020

If Vendor insecurity seems to be the new norm then God help all of us

Attackers compromise Twilio's SDK due to misconfigured  AWS S3 buckets left the SDK's path publicly readable and writable for roughly five years. Twilio powers communications for over 40,000 businesses and helps developers add voice, video, messaging, and authentication capabilities. 

The company's customer list includes Twitter, Netflix, Uber, Shopify, Morgan Stanley, Airbnb, Wix, Spotify, Yelp, Hulu, Intuit, ING, eBay, and countless others.



Interesting Observations on Hate groups:

 1 - Education plays a MINOR role in determining who does or does not join a hate group. 
2 - The more religious groups on the East Coast, the more hate groups. 
3 - Poverty is a crucial driver.