Hacker News new | ask | show | jobs
by snoman 464 days ago
Not sure what you’re getting at. An S3 bucket out-of-the-box is secure and can’t leak/be accessed publicly.

There’s legitimate use cases for making a bucket public.

What are you advocating for?

1 comments

A good security model doesn't let stupid people do stupid things with warnings. Stupid people ignore warnings.

A good model protects stupid people from themselves.

A password model that says "you MUST have a strong password" protects stupid people from their own stupidity. A model that says you can use bad passwords if you click through warnings is a shite model. Stupid people ignore warnings.

Seriously.

So a good operating system doesn't let you install apps except from the app store?