Thread by @QuinnyPig

"web3 / nfts are a scam" vs. "no they're not" arguments in my mentions are tiresome, so in this thread let's talk about something that's definitively a scam because I built it to be.

Here's how to embezzle money from your employer via the @awscloud Marketplace:

(Somewhere @stephenorban's phone is making the Sev 1 sound and @mosescj58 takes an antacid tablet.)

Step 1: Go grab a CentOS or Ubuntu upstream AMI and package it as your own AMI. This is left as an exercise for the reader because I can't be bothered to do that in our glorious Serverless future.

Step 2: Put it up for sale on the AWS Marketplace. For god's sake don't name the entity selling it anything that remotely hints at who you are, you colossal fool.

Set the price to something reasonable, like 5¢ an hour or whatnot. Don't get greedy!

Step 3: Using an identity that IS VERY MUCH NOT TIED TO YOU, write a blog post somewhere that talks through how to do a task that you're doing at work. Reference the Marketplace AMI in your blog post.

Step 4: Roll the thing out at work. If anyone ever flags it, reference the blog post that "somebody else wrote." You'll look like someone who made a mistake, rather than someone nefarious.

Step 5: Laugh at my funny joke BUT DO NOT ACTUALLY FREAKING DO THIS unlike the last time I made this reference:
reddit.com/r/aws/comments…

You will get caught, and you will not make enough money for this to be worthwhile. Grow some ethics.

But do laugh at the funny joke.

Now think for a second about how you'd detect this in your environment. How would you prevent it?

Welcome to the world of Procurement; they have a lot of value to add here.