He said > But such a feature could also be used to create a fake 169.254.169.254...

rytill on Jan 13, 2022 | parent | context | favorite | on: Ghost in the ethernet optic

He said

> But such a feature could also be used to create a fake 169.254.169.254 (AWS/Cloud metadata IP address endpoint) and serve requests from it.

Wouldn’t such a thing be impossible if the application is using end-to-end encrypted requests to AWS?

optimuspaul on Jan 13, 2022 [–]

the metadata service is http and not encrypted.