3 ms·
Compliance is not security. A sophisticated attacker with access to Amazon's infrastructure can read anything they like out of the memory of the machine your i
by BrainInAJar 10y ago
Compliance is not security.
A sophisticated attacker with access to Amazon's infrastructure can read anything they like out of the memory of the machine your instance is on without you or anyone else ever knowing it.
- dogma1138 10y agoIf you are worried about actors with that capability you probably want to airgap your entire operation.
- BrainInAJar 10y agoDoesn't need to be airgapped, just defended, and not in the cloud. If the client is someone like Juniper or Cisco (which, if you're a pentest firm buying 8x gpu servers for cracking hashes, would be a reasonable customer) nation state actors would absolutely love to have access to your dataset. And they're already in AWS's datacentres.