March 28, 2014

Bitcoin mining? - Had to close my AWS account

When I read about a similar incident in hacker news sometime back,  I felt sorry for that person and also happy that I had not exposed my secret key. I woke up this morning to see the same thing happen to my account.  I got an email this morning from AWS that my account was compromised and the secret key was available in github.

When I looked at that Github project, I was cursing myself. It was created a year back when I was taking part in a startup weekend event. I don't even remember checking in my secret key in the rush for delivering something over the weekend. Now it has come to haunt me. Someone had launched almost 20 "c3.8xlarge" instances in each region and too many spot instances. Estimated bill is already $300 in a day. It was exhausting for me to find every resource launched in every region and terminate it. I had to close my AWS account to stop further charges and sent an email to the support team and hoping that they would consider that my account was compromised. I am guessing it is bitcoin mining incident again.

I was using this account just for learning AWS and was launching EC2 micro/medium instances to try few things.  I assume most of the devs working in cloud projects would have their personal account to learn AWS and would never ever need to launch such Large instances. I hope that Amazon AWS would provide an option to create a developer account which gives access only to create micro/medium instances for learning AWS and not to worry about huge bill even if the key is exposed by mistake.

Hope that AWS support team helps me this time.

I wish I had the skills like Liam Neeson in "Taken" movie to go after them :)

EDIT:

Estimated bill is now $1534. I called up Amazon immediately and the customer care was very helpful. They informed me that they would arrange for one time credit and asked me to be careful with the Access keys. They also fixed my account and asked me to continue using it.

As suggested by Garp in the comments, the first thing I did is to delete my AWS access keys and created a IAM user with permission to create only t1.micro instances in us-east-1 region.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": "ec2:*",
      "Effect": "Allow",
      "Resource": "arn:aws:ec2:us-east-1:*",
      "Condition": {
         "StringEquals": {
            "ec2:InstanceType": "t1.micro"
         }
      }
    },
    {
      "Effect": "Allow",
      "Action": "elasticloadbalancing:*",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "cloudwatch:*",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "autoscaling:*",
      "Resource": "*"
    }
  ]
}

Amazon customer care is the best. 

86 comments:

  1. So is this the same guy who stole your bicycle ?

    ReplyDelete
  2. So sad venky.. Thanks for sharing. I feel I missed an opportunity to play with someone's account ;-)

    ReplyDelete
  3. Windows Azure is good in that sense, they limit your cores to 20 by default and you send an email to support or call them to get it bumped up.

    ReplyDelete
  4. Wow that sucks you know Leonardo Da Vinci said that in the future the people that uses the invisible money win everthimg

    ReplyDelete
  5. It looks like it's possible in IAM policies to enforce what size instances a user can spawn. I gave this a quick shot in the IAM policy simulator and it seemed to effectively restrict my user to only being able to do anything with m1.small instances. Hope this helps:

    {
    "Version": "2012-10-17",
    "Statement": [
    {
    "Sid": "Stmt1396069018000",
    "Effect": "Allow",
    "Action": [
    "ec2:*"
    ],
    "Condition": {
    "StringEquals": {
    "ec2:InstanceType": "m1.small"
    }
    },
    "Resource": [
    "*"
    ]
    }
    ]

    ReplyDelete
    Replies
    1. Thanks Garp. I should have done that earlier. Lesson learnt.

      Delete
  6. Bitcoin mining is facing a hard time now due to hash rate difficulty. Nevertheless, if you’re still on it, opt for an ultra-low power device for a cheaper power cost. AMD Radeon HD 6970 (480 kH/s for Litecoin and 400 MH/s for Bitcoin) can be a pretty good hardware investment.

    ReplyDelete
  7. Good to see you write blog Venky.

    ReplyDelete
  8. This blog is so nice to me. I will keep on coming here again and again. Visit my link as well.. Donationhub

    ReplyDelete
  9. There was no price associated with BitCoins since there were no existing currencies that could be directly exchanged for them. A number of early adopters began getting involved in BitCoins since they saw its potential as an alternative medium of exchange. Sincerely

    ReplyDelete
  10. Transactions with bitcoins are anonymous in nature as such. It doesn't involve names but the transactions can be linked to the individual. how to purchase bitcoins

    ReplyDelete
  11. The estimation of Bitcoin dropped lately in view of the sudden stoppage of exchanging Mt. Gox, which is the biggest Bitcoin trade on the planet. latest crypto news

    ReplyDelete
  12. I wanted to thank you for this excellent read!! I definitely loved every little bit of it. I have you bookmarked your site to check out the new stuff you post. usitech

    ReplyDelete
  13. Bitcoin is one of the first digital currencies. It can only be used on the internet. It is not controlled by a central bank and has its own made-up rules. So, should you use bitcoins? how to speed up my unconfirmed bitcoin transaction

    ReplyDelete
  14. The writings so beautifully composed. They are just irresistible.
    Kucoin exchange review

    ReplyDelete
  15. If you think Bitcoin is money, try paying your taxes with it. Yet Cameron and Tyler Winklevoss are now seeking to use their technological savvy, and money, to bring Bitcoin into the mainstream. stuck bitcoin transaction

    ReplyDelete
  16. Bitcoin can now be found on every corner, now there is a more serious problem. An interesting fact is that it is not possible to find a reliable source of drivers. I spent a lot of effort and time, in order to find and download ATI drivers http://driverscenter.com/manufacturers/ati. But when I find this, I could instal any driver which I need, so it's good storage, which I wanted share with you, guys.

    ReplyDelete
  17. This blog through it words has given a key to proficiency.
    Ricona ICO

    ReplyDelete
  18. Others might want to purchase Bitcoin with plastic. Coinbase likewise gives this administration and has clear well ordered guidelines on the best way to continue with either your charge or Visa. Ricona ICO

    ReplyDelete
  19. Bitcoins are not issued by any central bank or government so there is no accountability whatsoever. If you are dealing with Dollars,Euros or Pounds you have the assurance that the government behind it will honor the debt while Bitcoins guide to cryptocurrency trading

    ReplyDelete
  20. Can we make the Web a crime-free zone? I don't think we'll ever be able to keep all the crime out of the Web. We can't make the Web a crime-free zone because the Web isn't something that's separate from society. coinmarketcap

    ReplyDelete
  21. Bitcoin looks like it's on the verge of a bursting bubble. So, why should you invest in it? This article dives into the benefits of bitcoin--aside from an investment. A quick, eye-opening pieces that truly sheds light on bitcoin's sustainability. eroiycoin.com

    ReplyDelete
  22. Your bitcoin address, your private key and the individual's bitcoin address. eroiycoin

    ReplyDelete
  23. That was when more individuals ended up mindful about the computerized cash, at that point the occurrence with Mt. Gox happened and it dropped to around $530. ico investment

    ReplyDelete
  24. Much controversy surrounds comparisons between precious metals and the growing number of crypto currencies. In some ways an ideological wedge has formed between hard asset investors and the most vocal of electronic currency advocates. While both investment options remain relatively sequestered from the mainstream spotlight, they both offer fascinating perspectives for understanding the ongoing monetary and financial crisis. Cloud Mining

    ReplyDelete
  25. Most often it is described as a non-government digital currency. Bitcoin is also sometimes called a cybercurrency or, in a nod to its encrypted origins, a cryptocurrency. bitcoin bounties

    ReplyDelete
  26. Any PC with the correct programming can be a piece of that framework, checking and supporting the system. best asic miners

    ReplyDelete
  27. This year the value of Bitcoin has soared, even past one gold-ounce. ethereum

    ReplyDelete
  28. An inquiry that regularly comes up frequently identifies with Bitcoin trickDouble Ripple

    ReplyDelete
  29. Unlike other currencies, there are three ways to make money with Bitcoin, saving, trading and mining. Bitcoin can be traded on open markets, which means you can buy Bitcoin low and sell them high.
    Bitcoin

    ReplyDelete
  30. 'Bitcoin' users are mostly scared by different news events including the statements by government officials and geopolitical events that 'Bitcoin' can be possibly regulated.The Crypto Guru

    ReplyDelete

  31. Tremendous issues here. I'm very glad to peer your article. Thank you a lot and I am looking ahead to touch you. Will you kindly drop me a mail? yahoo mail login

    ReplyDelete
  32. Thank you because you have been willing to share information with us. we will always appreciate all you have done here because I know you are very concerned with our. cryptocurrencies reviews

    ReplyDelete
  33. The Bitcoin swapping scale does not rely upon the national bank and there is no single specialist that administers the supply of CryptoCurrency.hardware wallets

    ReplyDelete
  34. This comment has been removed by the author.

    ReplyDelete
  35. Genesis Mining has an intriguing capacity to appropriate the mining power in a few cryptographic forms of money. http://topminingcodes.com

    ReplyDelete
  36. There will be a page that shows you how many bitcoins are currently in your wallet. eyeline trading review

    ReplyDelete
  37. Cryptocurrency has not only given the fastest way to transfer the money TheBlockStop

    ReplyDelete
  38. It was exhausting for me to find every resource launched in every region and terminate it. I had to close my AWS account to stop further charges and sent an email to the support team and hoping that they would consider that my account was compromised. More here on this site: https://icopulse.com/ico-list

    ReplyDelete
  39. Really a great addition. I have read this marvelous post. Thanks for sharing information about it. I really like that. Thanks so lot for your convene. bitcoin mixer review

    ReplyDelete
  40. Bitcoin has a low risk of collapse unlike traditional currencies that rely on governments. When currencies collapse, it leads to hyperinflation or the wipeout of one's savings in an instant.
    jetwin

    ReplyDelete
  41. Immediately drawn by writer’s exclusive way of writing.
    ICO Consulting

    ReplyDelete
  42. It's superior, however , check out material at the street address.
    ビットコイン

    ReplyDelete
  43. You can do three things with Bitcoins,https://www.jetwin.com/en-us/bitcoin-casino you can make a purchase, send money to someone anonymously or use it as an investment.

    ReplyDelete
  44. Since there is no central authority managing Bitcoin, no service fee is paid when receiving or transmitting payment https://bitcoinvest.cc

    ReplyDelete
  45. They're not subject to any sort control. Private ventures love them, in light of the fact that there're no charge card expenses included. crypto

    ReplyDelete
  46. Post strings and get some information about. Numerous discussions additionally have blog segment where specialists post educational articles. btc doubler

    ReplyDelete
  47. Love what you're doing here guys, keep it up!..
    saint bitts llc

    ReplyDelete
  48. Can't get over the way that words can be utilized this flawlessly.
    Mason Soiza

    ReplyDelete
  49. Federal Reserve prints more dollars, at whatever point the economy is sputtering. Government infuses the new made cash into the economy causing a decline in money esteem, along these lines activating swelling. https://www.techpally.com/using-cryptocurrencies-for-business/

    ReplyDelete
  50. If you don"t mind proceed with this extraordinary work and I anticipate a greater amount of your magnificent blog entries.  https://coinairdrops.com

    ReplyDelete
  51. We're a cryptocurrency alerting website that offers price alerts, percent price alerts, wallet alerts and other alerts for bitcoin and other cryptocurrencies with many notification options (email, sms, slack, telegram, etc). alerting

    ReplyDelete
  52. Best work you have done, this online website is cool with great facts and looks. I have stopped at this blog after viewing the excellent content. I will be back for more qualitative work. bitcoin price today

    ReplyDelete
  53. For each 2016 squares, trouble involved in mining of Bitcoins is balanced without anyone else's input essentially to keep up the convention. best bitcoin cloud mining

    ReplyDelete
  54. After reading your article I was amazed. I know that you explain it very well. And I hope that other readers will also experience how I feel after reading your article. обмен киви на биткоин

    ReplyDelete
  55. I definitely enjoying every little bit of it. It is a great website and nice share. I want to thank you. Good job! You guys do a great blog, and have some great contents. Keep up the good work. investimentos

    ReplyDelete
  56. A few naysayers, generally regarded financiers and business analysts for the most part proceed to term them as easy money scams with no steady establishment.https://www.explosion.com/129102/lucrotrade-guide-where-can-i-keep-my-bitcoins/

    ReplyDelete
  57. Thank you so much as you have been willing to share information with us. We will forever admire all you have done here because you have made my work as easy as ABC. visit the manufacturer here for purchasing

    ReplyDelete
  58. Hi there, I found your blog via Google while searching for such kinda informative post and your post looks very interesting for me
    The best way for mining Bitcoin is The ASIC Hardware

    ReplyDelete
  59. Thanks for taking the time to discuss that, I feel strongly about this and so really like getting to know more on this kind of field. Do you mind updating your blog post with additional insight? It should be really useful for all of us. https://blockchainwhispers.com

    ReplyDelete
  60. hi was just seeing if you minded a comment. i like your website and the thme you picked is super. I will be back. Binary options recovery

    ReplyDelete
  61. For the most part there are a bunch of approaches to verify that a bitcoin transformation site page is innocuous. https://cryptalker.com/buy-bitcoin-with-cash/

    ReplyDelete
  62. Yes, I am entirely agreed with this article, and I just want say that this article is very helpful and enlightening. I also have some precious piece of concerned info !!!!!!Thanks. Icos News

    ReplyDelete
  63. While you can legitimately sell and purchase Bitcoin, you can likewise utilize Bitcoin exchanging trades to proceed with your exchanges digital money. the bitcoin code

    ReplyDelete
  64. What's more, if the Bubble alarms you, putting resources into bitcoin is only one of the choices, yet not alone.Bitcoin Robot

    ReplyDelete
  65. What a fantabulous post this has been. Never seen this kind of useful post. I am grateful to you and expect more number of posts like these. Thank you very much. crypto millions lotto

    ReplyDelete
  66. Pretty good post. I just stumbled upon your blog and wanted to say that I have really enjoyed reading your blog posts. Any way I'll be subscribing to your feed and I hope you post again soon. Big thanks for the useful info. Private Bitcoin Exchange

    ReplyDelete
  67. When you are traveling using cash or traveler's check, 9.99 the best foreign money exchange rates could be had at post offices,

    ReplyDelete
  68. Bitcoin provides a fast cheap and secure transaction alternative but few are willing to take the jump for it. So the one million dollar question still lingers, is Bitcoin a secure investment?
    hyip

    ReplyDelete
  69. I am unquestionably making the most of your site. You unquestionably have some extraordinary knowledge and incredible stories. free bitcoin

    ReplyDelete
  70. Comparebrokers.co investment broker review and comparison website. FXPrimus review and comparison. fxprimus customer review

    ReplyDelete
  71. Find the best UAE brokers on comparebrokers.co. Comparebrokers.co is a review and comparison website. United Arab Emirates brokerage firms

    ReplyDelete
  72. A few people attempt to characterize a distinction among contributing and conjecturing. convert currency

    ReplyDelete
  73. Notwithstanding utilizing it in your exchanges, you can likewise exchange it accordingly making colossal benefits. Top 10 Trading Platform Online

    ReplyDelete
  74. Ethereum is the strongest rival to Bitcoin in the cryptocurrency market and many wonder at the question of Bitcoin vs Ethereum. Bitcoin

    ReplyDelete
  75. What a fantabulous post this has been. Never seen this kind of useful post. I am grateful to you and expect more number of posts like these. Thank you very much. best cable company

    ReplyDelete
  76. This blog has a positive and eager result.
    trading bot

    ReplyDelete
  77. Best way to use bitcoin anonymously is to use a good dark web wallet with integrated bitcoin mixer like for example:
    http://mixbitw5m5zh4m7u.onion/
    Or http://mixerpkpxev6qruk.onion/
    (Tor browser from torproject.org needed to access .onion sites)

    ReplyDelete
  78. Wow i can say that this is another great article as expected of this blog.Bookmarked this site.. Hourly Invest

    ReplyDelete
  79. You there, this is really good post here. Thanks for taking the time to post such valuable information. Quality content is what always gets the visitors coming. What is bitcoin profit

    ReplyDelete
  80. This is such a great resource that you are providing and you give it away for free. I love seeing blog that understand the value of providing a quality resource for free. Bitcoin Revolution App

    ReplyDelete
  81. Cash FX The Better Way To Your Financial Future. Ask Me How? bitcoin forex trading

    ReplyDelete