Hacker News new | ask | show | jobs
by ericpauley 1472 days ago
Interestingly, AWS takes no such actions against massive scans of infrastructure. One can acquire millions of cloud servers in search of co-residency without action being taken.
1 comments

Sure, probably there are no people mounting such attacks today.

My point was more like - the moment it becomes known that people are doing that sort of thing, they would implement mitigations. Sucks if you're literally the first victim who detects what happened, but that's not many people, especially because this sort of "flood the server with data and measure timing" attacks are so noisy and visible.

Unfortunately under the shared responsibility model the cloud provider won’t necessarily take actions in this case because of the precedent it sets.