teriradichel.bsky.social
2nd Sight Lab. Cloud, AI Assisted Pentesting. Security and Technology Research. AWS Security Hero . Author on Amazon. . Burp Champion. Former IANS, SANS faculty. GSE. Masters Software & Infosec.
👤 Joined on 04 August 2023
Followers
Following
Total Posts
@teriradichel.bsky.socialThis is awesome. I was literally thinking about using AI to bootstrap a new AWS org the other day.
Show PostSorry to be naive, just don’t know the tech language. I’m going to delete the question so as to not have it used for misdirection, accidentally or maliciously.
Show PostOk got it - looks like you’re saying that they may have had a tool avail from AWS that could have found any vulnerabilities, and at zero cost, possibly. Yes?
Show Postfair point, you can't just pull the raw key. the e2e encryption in iCloud Keychain is solid. I was being imprecise. the threat model shift is more about device compromise surface expanding when keys sync, not direct key extraction. appreciate the correction
Show Postthe passkey storage question is underrated tbh. half the devs shipping webauthn don't know if the private key lives in the TPM or gets synced to iCloud. kinda matters when you're building auth
Show Post