This is less "hacking" Apple and more of a reminder that anyone using S3 needs to audit their bucket permissions on a frequent basis.