#KRITIS Sektor #IT und #TK

Huge #ransomware campaign targets #AWS S3 storage: attackers have thousands of keys

"A massive database of over 1,200 unique #Amazon Web Services (AWS) access keys has been amassed and #exploited in a ransomware campaign. Administrators of exposed AWS S3 buckets are finding their files encrypted except for a ransom note demanding payment in bitcoin."
https://cybernews.com/security/aws-cloud-storage-bucket-ransomware-attacks/

Anyone have any experience using #AWS workspaces or VNC as a #rstats or #bioinformatics dev environment. I much prefer the idea of keeping dev on a local laptop and avoiding potential latency issues, keeping a single file system, and the ability to work on the go even without internet, but would be interested to hear others experiences.

correct HTTPS (SVCB) record support is still a distant dream for Firefox and chrome. So #AWS adding static IPs to cloudfront will be welcome for many customers.
Natch AWS mangles #DNS terms in the announcement, but the feature is good anyways.
https://aws.amazon.com/about-aws/whats-new/2025/04/amazon-cloudfront-anycast-static-ips-apex-domains/

TIL you can use torrents to seed+distribute s3 files. I wonder if anyone has written the reverse, an s3 frontend backed by torrents. That strikes me as useful for fedi media caching (though perhaps the deduplication of hashes/IPFS would suit better)

https://carltonbale.com/how-to-create-and-seed-a-torrent-download-on-amazon-s3/

Good Morning #Amsterdam #aws #awssummit

I saw today that my CoCalc (https://cocalc.com/) license was about to renew. I've been meaning to move to a more #SelfHosting or #P2P paradigm, so this was good timing for me to cancel. I left this message when doing so:

"I want to support Sage, and I like using CoCalc, but I don't want to put money towards a service that supports Microsoft, Amazon, or OpenAI in any way. I didn't care so much about this before, and I even log in to CoCalc with a GitHub account, but I'm tired of having my work scraped for profit by people who donate to fascists who are destroying my nation. I would consider returning if all ties to these corporations were cut and cloud computing services came from responsible companies, perhaps in the EU."

I'm pretty sure I already have backups of everything I want from GitHub, so I can be done with them too. I should have quit when Microsoft first arrived. My plan is to switch to Radicle (https://radicle.xyz/) rather than another centralized service. I'll be sure to post about how that goes.

What's the least #evil #DNS provider?

I've put some of my properties on #Cloudflare, and I can still hear the boo's.
#Google cloud DNS and #AWS are no better.

I can put #Bind9 on my own #FOSS stacks, but I probably lack the uptime for reliability.

I'm moving away from my CPanel provider into my own #Selfhosting on a #VPS.

I'm thinking one NS on something reliable and one on my own stack.

What does #masodon hivemind recommend?

If you're using #Serverless Framework, and you really don't want to move to v4 because they've now made it pay to play, you can use this Open Source version:
https://github.com/oss-serverless/serverless

Pretty much a drop in replacement

Hackers target #SSRF bugs in #EC2-hosted sites to steal #AWS credentials

https://www.bleepingcomputer.com/news/security/hackers-target-ssrf-bugs-in-ec2-hosted-sites-to-steal-aws-credentials/

Wrapped up an awesome 6-month bioinformatics #Python -> #Terraform -> #AWS gig. Open to new telecommute Python / #Golang / #Perl software stacks, database thrashing / analytics, or DevOps / cloud infrastructure work.

Thanks for any leads, boosts!

Dream job, resume on my blog: https://notes.jays.net/blog/resume/ #GetFediHired

#AWS rolls out #MLKEM to secure #TLS from #quantum threats

https://www.bleepingcomputer.com/news/security/aws-rolls-out-ml-kem-to-secure-tls-from-quantum-threats/

If you care about #AWS, this from @Quinnypig is a big deal: https://www.duckbillgroup.com/blog/ec2-reserved-instances-are-being-deprecated/

Tl;dr: Reserved Instances are being quietly deprecated .

Just finished transitioning a small #EU business from #AWS to #Hetzner. 5 medium sized servers, one load balancer, about 20 TB of backend traffic a month and then a CDN. If you are on the fence about doing it, it’s really pretty easy. Hetzner has good Terraform coverage.

The part I was a little bit surprised by was the cost difference. Hosted inside the EU, Hetzner is coming in about 60% cheaper than AWS.

The problem with #unplugtrump is, it is impossible to fully live without. A lot of websites are hosted by #cloudflare or #AWS or #azure or #GCP.
I can buy from somewhere else, I can use another email service (but is this hosted on an European server?), but just surfing the internet, even only German sites, is mostly using big tech. Daimler, Bahn, Allianz and many others have migrated their IT to one of the top three cloud providers.
My uni forces me to use zoom or teams

https://www.nytimes.com/2020/07/31/technology/blocking-the-tech-giants.html