3 ms·

What about privacy? Our company doesn't use a cloud provider for that exact reason.

• kesor 10y ago
  Have you investigated the issues with privacy in public clouds, or do you just "assume" that it is much worse than your own mismanaged hardware without doing any due diligence? From exprience, most organisations manage the privacy of their customers much much worse on their own hardware than they would if they used a public cloud provider. Want to know how "privacy" really looks like? Take a look here - http://www.informationisbeautiful.net/visualizations/worlds-biggest-data-breaches-hacks/ http://www.informationisbeautiful.net/visualizations/worlds-...
  • cyberpunk 10y ago
    The difference is simply though that they own the entire scope of the privacy concerns on prem; even if they manage them poorly. In the public cloud, as an engineer/employee/government I can just login to any given XEN/KVM/SmartOS/Whatever host that's running your instances and simply read your secrets and even if your opsec is perfect there's nothing you can do about it. 'privacy' in the cloud is not about mismanagement/good practice -- it's about who is able to act on it. There is no way that anything you have running on infra you don't completely own and control will ever be private; to even a casual observer it's obvious that there is absolutely no defense or privacy possible in such an environment.
  • pasta 10y ago
    I'm sorry I was not very clear. I meant privacy as in company critical data like finance, price agreements and so one. There are also a lot of companies who don't like storing data in a foreign country. What if the government was taken over by a Mr Trump who doesn't give about past agreements? And using a managed cloud doesn't mean no data breach. You can still write SQL injectable websites that read data from the 'safe' cloud.