To ensure that this person deleted the credentials they had taken from the server they popped with the RCE, obviously.<p>Again: read the timeline. He submitted a finding with AWS creds taken from the server he popped on October 22 --- <i>on December 1, more than a month after Facebook shut the server down</i>. He took AWS creds from a Facebook server and saved them on his laptop for more than a month.<p>WHY?