March 28, 2014

Bitcoin mining? - Had to close my AWS account

When I read about a similar incident in hacker news sometime back,  I felt sorry for that person and also happy that I had not exposed my secret key. I woke up this morning to see the same thing happen to my account.  I got an email this morning from AWS that my account was compromised and the secret key was available in github.

When I looked at that Github project, I was cursing myself. It was created a year back when I was taking part in a startup weekend event. I don't even remember checking in my secret key in the rush for delivering something over the weekend. Now it has come to haunt me. Someone had launched almost 20 "c3.8xlarge" instances in each region and too many spot instances. Estimated bill is already $300 in a day. It was exhausting for me to find every resource launched in every region and terminate it. I had to close my AWS account to stop further charges and sent an email to the support team and hoping that they would consider that my account was compromised. I am guessing it is bitcoin mining incident again.

I was using this account just for learning AWS and was launching EC2 micro/medium instances to try few things.  I assume most of the devs working in cloud projects would have their personal account to learn AWS and would never ever need to launch such Large instances. I hope that Amazon AWS would provide an option to create a developer account which gives access only to create micro/medium instances for learning AWS and not to worry about huge bill even if the key is exposed by mistake.

Hope that AWS support team helps me this time.

I wish I had the skills like Liam Neeson in "Taken" movie to go after them :)

EDIT:

Estimated bill is now $1534. I called up Amazon immediately and the customer care was very helpful. They informed me that they would arrange for one time credit and asked me to be careful with the Access keys. They also fixed my account and asked me to continue using it.

As suggested by Garp in the comments, the first thing I did is to delete my AWS access keys and created a IAM user with permission to create only t1.micro instances in us-east-1 region.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": "ec2:*",
      "Effect": "Allow",
      "Resource": "arn:aws:ec2:us-east-1:*",
      "Condition": {
         "StringEquals": {
            "ec2:InstanceType": "t1.micro"
         }
      }
    },
    {
      "Effect": "Allow",
      "Action": "elasticloadbalancing:*",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "cloudwatch:*",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "autoscaling:*",
      "Resource": "*"
    }
  ]
}

Amazon customer care is the best. 

110 comments:

  1. So is this the same guy who stole your bicycle ?

    ReplyDelete
  2. So sad venky.. Thanks for sharing. I feel I missed an opportunity to play with someone's account ;-)

    ReplyDelete
  3. Windows Azure is good in that sense, they limit your cores to 20 by default and you send an email to support or call them to get it bumped up.

    ReplyDelete
  4. Wow that sucks you know Leonardo Da Vinci said that in the future the people that uses the invisible money win everthimg

    ReplyDelete
  5. It looks like it's possible in IAM policies to enforce what size instances a user can spawn. I gave this a quick shot in the IAM policy simulator and it seemed to effectively restrict my user to only being able to do anything with m1.small instances. Hope this helps:

    {
    "Version": "2012-10-17",
    "Statement": [
    {
    "Sid": "Stmt1396069018000",
    "Effect": "Allow",
    "Action": [
    "ec2:*"
    ],
    "Condition": {
    "StringEquals": {
    "ec2:InstanceType": "m1.small"
    }
    },
    "Resource": [
    "*"
    ]
    }
    ]

    ReplyDelete
    Replies
    1. Thanks Garp. I should have done that earlier. Lesson learnt.

      Delete
  6. Bitcoin mining is facing a hard time now due to hash rate difficulty. Nevertheless, if you’re still on it, opt for an ultra-low power device for a cheaper power cost. AMD Radeon HD 6970 (480 kH/s for Litecoin and 400 MH/s for Bitcoin) can be a pretty good hardware investment.

    ReplyDelete
  7. Good to see you write blog Venky.

    ReplyDelete
  8. This blog is so nice to me. I will keep on coming here again and again. Visit my link as well.. Donationhub

    ReplyDelete
  9. There was no price associated with BitCoins since there were no existing currencies that could be directly exchanged for them. A number of early adopters began getting involved in BitCoins since they saw its potential as an alternative medium of exchange. Sincerely

    ReplyDelete
  10. Transactions with bitcoins are anonymous in nature as such. It doesn't involve names but the transactions can be linked to the individual. how to purchase bitcoins

    ReplyDelete
  11. The estimation of Bitcoin dropped lately in view of the sudden stoppage of exchanging Mt. Gox, which is the biggest Bitcoin trade on the planet. latest crypto news

    ReplyDelete
  12. I wanted to thank you for this excellent read!! I definitely loved every little bit of it. I have you bookmarked your site to check out the new stuff you post. usitech

    ReplyDelete
  13. Bitcoin is one of the first digital currencies. It can only be used on the internet. It is not controlled by a central bank and has its own made-up rules. So, should you use bitcoins? how to speed up my unconfirmed bitcoin transaction

    ReplyDelete
  14. The writings so beautifully composed. They are just irresistible.
    Kucoin exchange review

    ReplyDelete
  15. If you think Bitcoin is money, try paying your taxes with it. Yet Cameron and Tyler Winklevoss are now seeking to use their technological savvy, and money, to bring Bitcoin into the mainstream. stuck bitcoin transaction

    ReplyDelete
  16. Bitcoin can now be found on every corner, now there is a more serious problem. An interesting fact is that it is not possible to find a reliable source of drivers. I spent a lot of effort and time, in order to find and download ATI drivers http://driverscenter.com/manufacturers/ati. But when I find this, I could instal any driver which I need, so it's good storage, which I wanted share with you, guys.

    ReplyDelete
  17. This blog through it words has given a key to proficiency.
    Ricona ICO

    ReplyDelete
  18. Others might want to purchase Bitcoin with plastic. Coinbase likewise gives this administration and has clear well ordered guidelines on the best way to continue with either your charge or Visa. Ricona ICO

    ReplyDelete
  19. Bitcoins are not issued by any central bank or government so there is no accountability whatsoever. If you are dealing with Dollars,Euros or Pounds you have the assurance that the government behind it will honor the debt while Bitcoins guide to cryptocurrency trading

    ReplyDelete
  20. Can we make the Web a crime-free zone? I don't think we'll ever be able to keep all the crime out of the Web. We can't make the Web a crime-free zone because the Web isn't something that's separate from society. coinmarketcap

    ReplyDelete
  21. Bitcoin looks like it's on the verge of a bursting bubble. So, why should you invest in it? This article dives into the benefits of bitcoin--aside from an investment. A quick, eye-opening pieces that truly sheds light on bitcoin's sustainability. eroiycoin.com

    ReplyDelete
  22. Your bitcoin address, your private key and the individual's bitcoin address. eroiycoin

    ReplyDelete
  23. That was when more individuals ended up mindful about the computerized cash, at that point the occurrence with Mt. Gox happened and it dropped to around $530. ico investment

    ReplyDelete
  24. Much controversy surrounds comparisons between precious metals and the growing number of crypto currencies. In some ways an ideological wedge has formed between hard asset investors and the most vocal of electronic currency advocates. While both investment options remain relatively sequestered from the mainstream spotlight, they both offer fascinating perspectives for understanding the ongoing monetary and financial crisis. Cloud Mining

    ReplyDelete
  25. Most often it is described as a non-government digital currency. Bitcoin is also sometimes called a cybercurrency or, in a nod to its encrypted origins, a cryptocurrency. bitcoin bounties

    ReplyDelete
  26. Any PC with the correct programming can be a piece of that framework, checking and supporting the system. best asic miners

    ReplyDelete
  27. This year the value of Bitcoin has soared, even past one gold-ounce. ethereum

    ReplyDelete
  28. An inquiry that regularly comes up frequently identifies with Bitcoin trickDouble Ripple

    ReplyDelete
  29. Unlike other currencies, there are three ways to make money with Bitcoin, saving, trading and mining. Bitcoin can be traded on open markets, which means you can buy Bitcoin low and sell them high.
    Bitcoin

    ReplyDelete
  30. 'Bitcoin' users are mostly scared by different news events including the statements by government officials and geopolitical events that 'Bitcoin' can be possibly regulated.The Crypto Guru

    ReplyDelete

  31. Tremendous issues here. I'm very glad to peer your article. Thank you a lot and I am looking ahead to touch you. Will you kindly drop me a mail? yahoo mail login

    ReplyDelete
  32. Thank you because you have been willing to share information with us. we will always appreciate all you have done here because I know you are very concerned with our. cryptocurrencies reviews

    ReplyDelete
  33. The Bitcoin swapping scale does not rely upon the national bank and there is no single specialist that administers the supply of CryptoCurrency.hardware wallets

    ReplyDelete
  34. This comment has been removed by the author.

    ReplyDelete
  35. Genesis Mining has an intriguing capacity to appropriate the mining power in a few cryptographic forms of money. http://topminingcodes.com

    ReplyDelete
  36. There will be a page that shows you how many bitcoins are currently in your wallet. eyeline trading review

    ReplyDelete
  37. Cryptocurrency has not only given the fastest way to transfer the money TheBlockStop

    ReplyDelete
  38. It was exhausting for me to find every resource launched in every region and terminate it. I had to close my AWS account to stop further charges and sent an email to the support team and hoping that they would consider that my account was compromised. More here on this site: https://icopulse.com/ico-list

    ReplyDelete
  39. Really a great addition. I have read this marvelous post. Thanks for sharing information about it. I really like that. Thanks so lot for your convene. bitcoin mixer review

    ReplyDelete
  40. Bitcoin has a low risk of collapse unlike traditional currencies that rely on governments. When currencies collapse, it leads to hyperinflation or the wipeout of one's savings in an instant.
    jetwin

    ReplyDelete
  41. Immediately drawn by writer’s exclusive way of writing.
    ICO Consulting

    ReplyDelete
  42. It's superior, however , check out material at the street address.
    ビットコイン

    ReplyDelete
  43. You can do three things with Bitcoins,https://www.jetwin.com/en-us/bitcoin-casino you can make a purchase, send money to someone anonymously or use it as an investment.

    ReplyDelete
  44. Since there is no central authority managing Bitcoin, no service fee is paid when receiving or transmitting payment https://bitcoinvest.cc

    ReplyDelete
  45. They're not subject to any sort control. Private ventures love them, in light of the fact that there're no charge card expenses included. crypto

    ReplyDelete
  46. Post strings and get some information about. Numerous discussions additionally have blog segment where specialists post educational articles. btc doubler

    ReplyDelete
  47. Love what you're doing here guys, keep it up!..
    saint bitts llc

    ReplyDelete
  48. Can't get over the way that words can be utilized this flawlessly.
    Mason Soiza

    ReplyDelete
  49. Federal Reserve prints more dollars, at whatever point the economy is sputtering. Government infuses the new made cash into the economy causing a decline in money esteem, along these lines activating swelling. https://www.techpally.com/using-cryptocurrencies-for-business/

    ReplyDelete
  50. If you don"t mind proceed with this extraordinary work and I anticipate a greater amount of your magnificent blog entries.  https://coinairdrops.com

    ReplyDelete
  51. We're a cryptocurrency alerting website that offers price alerts, percent price alerts, wallet alerts and other alerts for bitcoin and other cryptocurrencies with many notification options (email, sms, slack, telegram, etc). alerting

    ReplyDelete
  52. Best work you have done, this online website is cool with great facts and looks. I have stopped at this blog after viewing the excellent content. I will be back for more qualitative work. bitcoin price today

    ReplyDelete
  53. For each 2016 squares, trouble involved in mining of Bitcoins is balanced without anyone else's input essentially to keep up the convention. best bitcoin cloud mining

    ReplyDelete
  54. After reading your article I was amazed. I know that you explain it very well. And I hope that other readers will also experience how I feel after reading your article. обмен киви на биткоин

    ReplyDelete
  55. I definitely enjoying every little bit of it. It is a great website and nice share. I want to thank you. Good job! You guys do a great blog, and have some great contents. Keep up the good work. investimentos

    ReplyDelete
  56. A few naysayers, generally regarded financiers and business analysts for the most part proceed to term them as easy money scams with no steady establishment.https://www.explosion.com/129102/lucrotrade-guide-where-can-i-keep-my-bitcoins/

    ReplyDelete
  57. Thank you so much as you have been willing to share information with us. We will forever admire all you have done here because you have made my work as easy as ABC. visit the manufacturer here for purchasing

    ReplyDelete
  58. Hi there, I found your blog via Google while searching for such kinda informative post and your post looks very interesting for me
    The best way for mining Bitcoin is The ASIC Hardware

    ReplyDelete
  59. Thanks for taking the time to discuss that, I feel strongly about this and so really like getting to know more on this kind of field. Do you mind updating your blog post with additional insight? It should be really useful for all of us. https://blockchainwhispers.com

    ReplyDelete
  60. hi was just seeing if you minded a comment. i like your website and the thme you picked is super. I will be back. Binary options recovery

    ReplyDelete
  61. For the most part there are a bunch of approaches to verify that a bitcoin transformation site page is innocuous. https://cryptalker.com/buy-bitcoin-with-cash/

    ReplyDelete
  62. Yes, I am entirely agreed with this article, and I just want say that this article is very helpful and enlightening. I also have some precious piece of concerned info !!!!!!Thanks. Icos News

    ReplyDelete
  63. While you can legitimately sell and purchase Bitcoin, you can likewise utilize Bitcoin exchanging trades to proceed with your exchanges digital money. the bitcoin code

    ReplyDelete
  64. What's more, if the Bubble alarms you, putting resources into bitcoin is only one of the choices, yet not alone.Bitcoin Robot

    ReplyDelete
  65. What a fantabulous post this has been. Never seen this kind of useful post. I am grateful to you and expect more number of posts like these. Thank you very much. crypto millions lotto

    ReplyDelete
  66. Pretty good post. I just stumbled upon your blog and wanted to say that I have really enjoyed reading your blog posts. Any way I'll be subscribing to your feed and I hope you post again soon. Big thanks for the useful info. Private Bitcoin Exchange

    ReplyDelete
  67. When you are traveling using cash or traveler's check, 9.99 the best foreign money exchange rates could be had at post offices,

    ReplyDelete
  68. Bitcoin provides a fast cheap and secure transaction alternative but few are willing to take the jump for it. So the one million dollar question still lingers, is Bitcoin a secure investment?
    hyip

    ReplyDelete
  69. I am unquestionably making the most of your site. You unquestionably have some extraordinary knowledge and incredible stories. free bitcoin

    ReplyDelete
  70. Comparebrokers.co investment broker review and comparison website. FXPrimus review and comparison. fxprimus customer review

    ReplyDelete
  71. Find the best UAE brokers on comparebrokers.co. Comparebrokers.co is a review and comparison website. United Arab Emirates brokerage firms

    ReplyDelete
  72. A few people attempt to characterize a distinction among contributing and conjecturing. convert currency

    ReplyDelete
  73. Notwithstanding utilizing it in your exchanges, you can likewise exchange it accordingly making colossal benefits. Top 10 Trading Platform Online

    ReplyDelete
  74. Ethereum is the strongest rival to Bitcoin in the cryptocurrency market and many wonder at the question of Bitcoin vs Ethereum. Bitcoin

    ReplyDelete
  75. What a fantabulous post this has been. Never seen this kind of useful post. I am grateful to you and expect more number of posts like these. Thank you very much. best cable company

    ReplyDelete
  76. This blog has a positive and eager result.
    trading bot

    ReplyDelete
  77. Best way to use bitcoin anonymously is to use a good dark web wallet with integrated bitcoin mixer like for example:
    http://mixbitw5m5zh4m7u.onion/
    Or http://mixerpkpxev6qruk.onion/
    (Tor browser from torproject.org needed to access .onion sites)

    ReplyDelete
  78. Wow i can say that this is another great article as expected of this blog.Bookmarked this site.. Hourly Invest

    ReplyDelete
  79. You there, this is really good post here. Thanks for taking the time to post such valuable information. Quality content is what always gets the visitors coming. What is bitcoin profit

    ReplyDelete
  80. This is such a great resource that you are providing and you give it away for free. I love seeing blog that understand the value of providing a quality resource for free. Bitcoin Revolution App

    ReplyDelete
  81. Cash FX The Better Way To Your Financial Future. Ask Me How? bitcoin forex trading

    ReplyDelete
  82. It was a very good post indeed. I thoroughly enjoyed reading it in my lunch time. Will surely come and visit this blog more often. Thanks for sharing. Bitmexresources.com

    ReplyDelete
  83. Many international banks are watching the cryptocurrency scene. This can lead to the entry of institutional investors into the market.https://bitmexresources.com/

    ReplyDelete
  84. Excellent article. Very interesting to read. I really love to read such a nice article. Thanks! keep rocking. view more

    ReplyDelete
  85. The website is looking bit flashy and it catches the visitors eyes. Design is pretty simple and a good user friendly interface. Bitcoin Revolution Review

    ReplyDelete
  86. Good post but I was wondering if you could write a litte more on this subject? I’d be very thankful if you could elaborate a little bit further. Appreciate it! Mobile phone

    ReplyDelete
  87. This is where the bot makes predictions and identifies potential trades or arbitrage opportunities[3] . Crypto bot

    ReplyDelete
  88. I really appreciate this wonderful post that you have provided for us. I assure this would be beneficial for most of the people. Thanks for sharing the information keep updating, looking forward to more posts. High Quality Product Images

    ReplyDelete
  89. Eyal Nachum is a fintech guru and a director at Bruc Bond. Eyal is the architect of the software that SMEs use to do cross-border payments.

    ReplyDelete
  90. Cardiovascular disorder is therefore common it's about the radar of each and every key care doctor. When an individual develops a risk factor, or some known hazard variable simplifies physicians accept actions to prescribe medications or lifestyle interventions created to prevent disease by progressing or developing. Dr. Eyal Nachum (Eyal.Nachum@sheba.health.gov.il) is a senior cardiologist working in Heart Transplantation Unit, Sheba Medical Center, Ramat Gan, Israel.

    ReplyDelete
  91. It was extremely all around composed and straightforward. Not at all like different online journals I have perused which are truly not that good.Thanks a lot wm casino

    ReplyDelete
  92. I was surfing the Internet for information and came across your blog. I am impressed by the information you have on this blog. It shows how well you understand this subject. Best bitcoin trading software

    ReplyDelete
  93. Great write-up, I am a big believer in commenting on blogs to inform the blog writers know that they’ve added something worthwhile to the world wide web!.. ethereum chile

    ReplyDelete
  94. Hello I am so delighted I located your blog, I really located you by mistake, while I was watching on google for something else, Anyways I am here now and could just like to say thank for a tremendous post and a all round entertaining website. Please do keep up the great work. comprar bitcoin brasil

    ReplyDelete
  95. In their push to bring Bitcoin to the mainstream, its promoters have accepted, and, in some cases sought out, increased regulation. Last month Mt. Gox registered itself as a money services business with the Treasury Department's Financial Crimes Enforcement Network. It has also increased customer verification measures. The changes came in response to a March directive from Financial Crimes Enforcement Network clarifying the application of its rules to virtual currencies. The Winklevosses' proposed ETF would bring a new level of accountability..   Visit this site

    ReplyDelete
  96. I would like to thank you for the efforts you have made in writing this article. as we provide Transfer Btc To Usd Exchange at affordable prices. for more info visit our website.

    ReplyDelete
  97. Thanks for a wonderful share. Your article has proved your hard work and experience you have got in this field. Brilliant .i love it reading. btc to skrill

    ReplyDelete
  98. When your website or blog goes live for the first time, it is exciting. That is until you realize no one but you and your. bitcoin mixer

    ReplyDelete
  99. Want to earn cryptocurrency by browsing the web? Click here for step by step instruction! You won't be disappointed! Cryptocurrency

    ReplyDelete
  100. It’s great to come across a blog every once in a while that isn’t the same out of date rehashed material. Fantastic read. Checkout here more info about find professional hackers for hire

    ReplyDelete
  101. I wanted to thank you for this great read!! I definitely enjoying every little bit of it I have you bookmarked to check out new stuff you post. Bitmain antminer S19 Pro bulk supply

    ReplyDelete
  102. Amazing post with quality information! Many wonder, how to recover stolen or scammed Bitcoin? Hire a bitcoin recovery expert online

    ReplyDelete
  103. You are sharing a piece of nice information about bitcoin mining, It helped me. Keep it up and In the future sharing more articles like this. Thanks for this message. What is Bitcoin cloud Mining

    ReplyDelete
  104. I wanted to thank you for this excellent read!! I definitely loved every little bit of it. I have you bookmarked your site to check out the new stuff you post. depresión económica

    ReplyDelete