Tell me more ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.
up vote 2 down vote favorite

If I am hosting a site on Amazon Web Services, how easy is it for someone to work out that I'm behind it, for example if it's a controversial campaign issue. WHOIS privacy with the domain registrar gives some degree of protection, but I wonder if a sleuth could trace the administrator of S3 buckets. And are there any measures I can take to avoid this, to achieve some level of anonymity?

share|improve this question

1 Answer

up vote 2 down vote accepted

If your campaigns are merely controversial you should be fine as it would be exceedingly hard to determine the owner of a S3 account merely from the URL (assuming, of course, you don't do something completely moronic like use your full name for the bucket). You may also want to make sure that neither your username/email address associated with the account can be easily traced back you or would otherwise be something that could be guessed at and provide an attacker a path to compromise the account via a password reset.

Ultimately, the security of your identity is only as good as:

  • The strength of the password on the account
  • Amazon's ability to withstand a social engineering style attack

I mention controversial as opposed to illegal or the appearance of illegality because Amazon will give up your information in a heartbeat in response to a valid request from law enforcement. Depending on where you are and how controversial the subject is, you might also get exposed in response to civil suit and act of discovery.

share|improve this answer
Why do you say you should make sure the username/email associated with the account cannot be traced back to you? Are these somehow publicly associated with your account? If not, then it shouldn't matter, unless you yourself were already suspected of involvement in the site. – user77510 Jan 29 at 12:29
More the latter. If you are a well-known supporter of a cause or hav posted publicly in support of a cause in the past that becomes data points that people could use to guess a username. So if I named my bucket JCL1178 and my amazon username is JCL then I am opening myself up to a possible lucky guess. Tl;dr: Paranoia can be good. – JCL1178 Jan 29 at 15:16

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.