Uncomfortable AWS Truths
> Despite no fewer than 6 attempts to patch the Open S3 Bucket problem, it remains. You can't patch people--legally, anyway.<p>Heh, I use S3 for hosting static sites only.<p>2 weeks ago they sent an email saying "[...] your AWS account xxxxxxxx has one or more S3 buckets that allow read or write access from any user on the Internet."<p>And I go "oh shit, what has write access set up?".<p>But nothing did. When they said "read or write", they meant 1, the other, or both. They just sent the same ambiguous email to everyone.