Comments on: The Cloud is not That Insecure http://www.gnucitizen.org/blog/the-cloud-is-not-that-insecure/ Information Security Think Tank Sat, 02 Feb 2013 17:50:40 +0000 hourly 1 http://wordpress.org/?v=3.4.1 By: Cloud is more secure than your own data center « Huan Liu’s Blog http://www.gnucitizen.org/blog/the-cloud-is-not-that-insecure/comment-page-1/#comment-127494 Cloud is more secure than your own data center « Huan Liu’s Blog Tue, 16 Jun 2009 23:17:42 +0000 https://www.gnucitizen.org/?p=1815#comment-127494 [...] I am not alone at saying that Cloud is secure. Check out Gnucitizen for [...] [...] I am not alone at saying that Cloud is secure. Check out Gnucitizen for [...]

]]> By: 4sysops - Is cloud computing secure? Pro and contra cloud security http://www.gnucitizen.org/blog/the-cloud-is-not-that-insecure/comment-page-1/#comment-124790 4sysops - Is cloud computing secure? Pro and contra cloud security Wed, 17 Dec 2008 20:55:25 +0000 https://www.gnucitizen.org/?p=1815#comment-124790 [...] Croll and Petko and D. Petkov claim that cloud computing has equal or even better security than on-premise computing. Here are [...] [...] Croll and Petko and D. Petkov claim that cloud computing has equal or even better security than on-premise computing. Here are [...]

]]> By: foo flaw http://www.gnucitizen.org/blog/the-cloud-is-not-that-insecure/comment-page-1/#comment-124573 foo flaw Fri, 05 Dec 2008 04:07:57 +0000 https://www.gnucitizen.org/?p=1815#comment-124573 you pretty much skate over the whole data security issue, which is the fundamental problem with multitenant environments, i would bet that the data is stored in big blobs (structured and unstructured) and if i had me one of those ec2 vms i could get at lots of data that didn't belong to me, not to mention the whole rogue sysadmin for sale notion. if your data doesn't matter and all you need is raw compute cycles, i'm ok with it but i'm not putting any data out there that matters. you pretty much skate over the whole data security issue, which is the fundamental problem with multitenant environments, i would bet that the data is stored in big blobs (structured and unstructured) and if i had me one of those ec2 vms i could get at lots of data that didn’t belong to me, not to mention the whole rogue sysadmin for sale notion. if your data doesn’t matter and all you need is raw compute cycles, i’m ok with it but i’m not putting any data out there that matters.

]]> By: Jon W http://www.gnucitizen.org/blog/the-cloud-is-not-that-insecure/comment-page-1/#comment-124560 Jon W Wed, 03 Dec 2008 15:27:29 +0000 https://www.gnucitizen.org/?p=1815#comment-124560 As a non-technical aside, one needs to consider the geographical locations of the boxes that make up the cloud, in conjunction with the kind of data you are storing. For example German vs. USA laws on storing user data, and indeed what constitutes "user data" in that locale. Essentially the same considerations you would have in using a Content Delivery Network or similar. As a non-technical aside, one needs to consider the geographical locations of the boxes that make up the cloud, in conjunction with the kind of data you are storing. For example German vs. USA laws on storing user data, and indeed what constitutes “user data” in that locale. Essentially the same considerations you would have in using a Content Delivery Network or similar.

]]> By: Morgan Storey http://www.gnucitizen.org/blog/the-cloud-is-not-that-insecure/comment-page-1/#comment-124555 Morgan Storey Tue, 02 Dec 2008 22:52:25 +0000 https://www.gnucitizen.org/?p=1815#comment-124555 As I have always said a system is only as good as its admin. It is no different than the "cloud computing" servers. Gmail, Amazon EC2/S3 are only good because the people behind them are good. I have no doubt that deep seeded nigh-on unfixable flaws will be found in current and future cloud computing solutions. If all your infrastructure rests on this provider at the time what do you do? Having said that from what I have seen of the services so far I am very impressed. But I won't be storing anything as vital as my health records or password database in the cloud just yet. As I have always said a system is only as good as its admin. It is no different than the “cloud computing” servers. Gmail, Amazon EC2/S3 are only good because the people behind them are good. I have no doubt that deep seeded nigh-on unfixable flaws will be found in current and future cloud computing solutions. If all your infrastructure rests on this provider at the time what do you do? Having said that from what I have seen of the services so far I am very impressed. But I won’t be storing anything as vital as my health records or password database in the cloud just yet.

]]> By: pdp http://www.gnucitizen.org/blog/the-cloud-is-not-that-insecure/comment-page-1/#comment-124469 pdp Tue, 25 Nov 2008 09:03:12 +0000 https://www.gnucitizen.org/?p=1815#comment-124469 the same applies to everything. at the end of the day you trust people, not the technology. the same applies to everything. at the end of the day you trust people, not the technology.

]]> By: bfw http://www.gnucitizen.org/blog/the-cloud-is-not-that-insecure/comment-page-1/#comment-124460 bfw Mon, 24 Nov 2008 16:27:23 +0000 https://www.gnucitizen.org/?p=1815#comment-124460 trusting cloud is trusting other people, not only underlying technology. trusting cloud is trusting other people, not only underlying technology.

]]> By: pdp http://www.gnucitizen.org/blog/the-cloud-is-not-that-insecure/comment-page-1/#comment-124447 pdp Mon, 24 Nov 2008 10:21:20 +0000 https://www.gnucitizen.org/?p=1815#comment-124447 SAL-e, yes but equally you can say that once you start using the Internet you don't know really who is snooping onto your traffic. Do you trust your ISP? How about the recent case where Verizon's employees accessed Obama's account? GSM networks are perfect examples of cloud technologies although we hardly refer to them as such. Maybe you don't trust them but you use them nevertheless for convenience. What I am trying to say is that things are not that different. Regardless where you put your data, it can still be compromised. But you can apply the same security principles, we have been developing in the past decade, on cloud and non-cloud infrastructures to make sure that they are reasonably secure. Heck, if you don't trust Amazon's E3 than there is nothing stopping your encrypting your data as you like. SAL-e, yes but equally you can say that once you start using the Internet you don’t know really who is snooping onto your traffic. Do you trust your ISP? How about the recent case where Verizon’s employees accessed Obama’s account? GSM networks are perfect examples of cloud technologies although we hardly refer to them as such. Maybe you don’t trust them but you use them nevertheless for convenience.

What I am trying to say is that things are not that different. Regardless where you put your data, it can still be compromised. But you can apply the same security principles, we have been developing in the past decade, on cloud and non-cloud infrastructures to make sure that they are reasonably secure.

Heck, if you don’t trust Amazon’s E3 than there is nothing stopping your encrypting your data as you like.

]]> By: SAL-e http://www.gnucitizen.org/blog/the-cloud-is-not-that-insecure/comment-page-1/#comment-124416 SAL-e Fri, 21 Nov 2008 17:57:46 +0000 https://www.gnucitizen.org/?p=1815#comment-124416 The cloud computing is kinda new for most of the users. The biggest problem for me and I believe many other users is the privacy. Once you upload your applications or data files you really don't know who else has access to them. I know that the companies providing cloud computing are deploying protection systems, but as we all know any system could be broken overtime. So it is mind set not a real problem at this time. Personally I use both. Some of my data is uploaded on the Internet, but some is not and never will be. I believe that both cloud and local computing will continue to co-exist. We just need to understand how they work and do proper planning. The cloud computing is kinda new for most of the users. The biggest problem for me and I believe many other users is the privacy. Once you upload your applications or data files you really don’t know who else has access to them. I know that the companies providing cloud computing are deploying protection systems, but as we all know any system could be broken overtime. So it is mind set not a real problem at this time. Personally I use both. Some of my data is uploaded on the Internet, but some is not and never will be. I believe that both cloud and local computing will continue to co-exist. We just need to understand how they work and do proper planning.

]]> By: John from Backupanytime.com http://www.gnucitizen.org/blog/the-cloud-is-not-that-insecure/comment-page-1/#comment-124415 John from Backupanytime.com Fri, 21 Nov 2008 16:27:53 +0000 https://www.gnucitizen.org/?p=1815#comment-124415 Not just an endorsemement of cloud computing, this article actually makews a good job of explaining what the cloud is. I am often asked about this and providig a simple, clear explanation is not easy. Well done. I will refer to this next time I am asked "What is the cloud all about...?" John Not just an endorsemement of cloud computing, this article actually makews a good job of explaining what the cloud is. I am often asked about this and providig a simple, clear explanation is not easy. Well done. I will refer to this next time I am asked “What is the cloud all about…?”

John

]]>