
Originally Posted by
abrown83
Server Admins are lazy especially when it comes to backups and using S3 storage.
I bet 98% of server admins give their backup API keys read and write access. If all they ever did was make a key that could write but not read, then have a separate read key that wasn't in any application this wouldn't be an issue.
Another classic is putting your backups in the same bucket as your media so you have the whole bucket publicly accessible.
The fact that they were on WP Engine says a lot about where they were at.
1. They don't have any money to build out real infrastructure (not that WP Engine is bad, it's great for small businesses).
2. The people running it had no idea about running a tech company.
3. They don't value Systems people.
4. All of the above
i mean... the mercers backed this and they punted 11m on ted cruz' fail campaign before dumping many times that on trumps campaign in 2016.
bob mercer is one of the principle architects of the renaissance fund, jim simons sniped him from IBM for his nascent AI/ML research skills.
there is zero point zero excuse beyond hubris and stone stupidity that they didnt hire literally anyone properly credentialed to manage this project, and literally everywhere one looks there is ample evidence of their myriad top-down failures.