Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

He'd have to somehow make outbound requests from the server. IIRC, the default AWS VPC config would prevent this. Not sure about other cloud environments.

Where I work, outbound requests must be made through proxy servers which have a whitelisted set of allowed domains, which is only allowed after a security review.



AWS default VPC config whe does not block outbound by default. Neither in the security group nor the ACL. And of the half dozen AWS hosted startups I’ve worked for nobody restricts outbound yet. “Security nice to have, not prioritized yet”


You can exfiltrate data a number of ways though. DNS requests might be one obvious method.


AWS has GuardDuty now which can monitor for this type of traffic for pretty cheap.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: